@tangle-network/agent-runtime 0.349.0 → 0.350.2

package/dist/{runtime-CsvGCQpl.js → runtime-6Ec9sHRe.js}

@@ -1,27 +1,27 @@
-import { s as writeAtomicDurableFile } from "./record-events-D93DkpAx.js";
-import { At as createExecutor, Ct as readCommittedJsonLines, Dt as createExecutorRegistry, Et as insideCursorNamespace, Ft as assertBoxlessPromptOptions, I as coordinationProfileToolPrefix, It as readPromptOptions, Jt as routerBrain, Li as detachedFrozen, Pr as runAbortable, Pt as runAgentRounds, Ri as detachedSnapshot, Rt as createSandboxLineage, Si as executableAgentSpecSnapshot, St as readCommittedJsonFile, Tt as withJsonlFileLock, Vt as defaultSelectWinner, W as rollingDispatch, _ as withDriverExecutor, _t as InMemorySpawnJournal, aa as notifySandboxEventObserver, b as isTraceAnalysisStore, bt as isNoEntError, dr as CheckUnavailableError, gt as InMemoryResultBlobStore, hn as createWorktreeCliExecutor, hr as verdictFromJudgeScore, mr as mapExecutorResult, n as createSupervisor, na as createSandboxTurnEventCollector, pr as gateOnDeliverable, wt as upsertCommittedJsonLine, xi as executableAgentProfileSnapshot, yt as appendCommittedJsonLine, z as settledToIteration, zi as contentAddress } from "./supervisor-wS9Ehz_x.js";
-import { i as ConfigError, m as ValidationError, n as AnalystError, s as PlannerError } from "./errors-DodWX-cb.js";
-import { D as runAgentic, E as refine, M as renderReport, N as profileChatClient, O as sample, j as observe, k as ObservationError, v as loadAuthoredStrategy, x as strategyAuthorContract, y as requestStrategySource } from "./structural-rollout-DylC_fwU.js";
-import { $ as isAbortError, B as sha256Bytes$1, C as WorkspaceScanLimitError, Ct as armDeadlineTimer, E as captureMaterializedWorkspace, K as chargedTokens, P as canonicalCandidateDigest$1, Q as hasCompleteCacheBreakdown, R as immutableCandidateValue, W as addSpend, X as errorMessage, Z as fnv1a32Hex, et as isAsyncIterable, ft as zeroSpend, h as markPutStreamVerified, ot as sleep, q as cloneSpend, rt as randomSuffix, st as stringifySafe, tt as mapWithConcurrency } from "./sandbox-profile-compat-DtuJWFrM.js";
-import { c as profileModelExecutionSettings, i as concreteModelId, l as profileProviderModel, o as enforceTokenLimits, p as canonicalObservedModelParts, t as assertExecutableAgentProfile, v as harnessRunsAgent } from "./model-policy-CyCUwHed.js";
-import { i as notifyRuntimeHookEvent } from "./runtime-hooks-tXpAarhW.js";
-import { a as reconcileInterruptedSearchCalls, c as searchExecutor, r as dedicatedLane, x as runtimeShipDecision } from "./search-executor-CCb82Umc.js";
-import { g as foldCoordinationRecords, p as createInMemoryRunContext } from "./coordination-manager-B2Z_MmL9.js";
-import { M as runBrainLoop, f as graphDigest, h as graphRunsFor, m as graphRegistry, p as graphFromStored, t as supervise, u as digestOfGraph, w as taskShapeDigest, x as recordGraphRun, y as lookupGraph } from "./supervise-BGfm2GlY.js";
-import "./run-cancellation-CzFhQGMa.js";
-import { i as redactProtectedValue, r as redactProtectedReason } from "./protected-redaction-DFCeo4vg.js";
-import "./provision-supervisor-C4v2vqDo.js";
-import "./delegate-Dr-63jFl.js";
-import "./graph-DPejYB3C.js";
+import { s as writeAtomicDurableFile } from "./record-events-B2GUgYdz.js";
+import { At as createExecutor, Bi as detachedSnapshot, Ci as executableAgentSpecSnapshot, Ct as readCommittedJsonLines, Di as runtimeFailureCauseSchema, Dt as createExecutorRegistry, Et as insideCursorNamespace, Ft as assertBoxlessPromptOptions, I as coordinationProfileToolPrefix, It as readPromptOptions, Jt as routerBrain, Pr as runAbortable, Pt as runAgentRounds, Rt as createSandboxLineage, Si as executableAgentProfileSnapshot, St as readCommittedJsonFile, Tt as withJsonlFileLock, Vi as contentAddress, Vt as defaultSelectWinner, W as rollingDispatch, _ as withDriverExecutor, _t as InMemorySpawnJournal, b as isTraceAnalysisStore, bt as isNoEntError, dr as CheckUnavailableError, gt as InMemoryResultBlobStore, hn as createWorktreeCliExecutor, hr as verdictFromJudgeScore, ia as createSandboxTurnEventCollector, mr as mapExecutorResult, n as createSupervisor, pr as gateOnDeliverable, sa as notifySandboxEventObserver, wt as upsertCommittedJsonLine, yt as appendCommittedJsonLine, z as settledToIteration, zi as detachedFrozen } from "./supervisor-C1OePYE-.js";
+import { i as ConfigError, m as ValidationError, n as AnalystError, s as PlannerError } from "./errors-wuhGvpE3.js";
+import { D as runAgentic, E as refine, M as renderReport, N as profileChatClient, O as sample, j as observe, k as ObservationError, v as loadAuthoredStrategy, x as strategyAuthorContract, y as requestStrategySource } from "./structural-rollout-B86bSixU.js";
+import { $ as hasCompleteCacheBreakdown, B as sha256Bytes$1, C as WorkspaceScanLimitError, E as captureMaterializedWorkspace, G as addSpend, J as cloneSpend, P as canonicalCandidateDigest$1, Q as fnv1a32Hex, R as immutableCandidateValue, Z as errorMessage, ct as stringifySafe, et as isAbortError, h as markPutStreamVerified, it as randomSuffix, nt as mapWithConcurrency, pt as zeroSpend, q as chargedTokens, st as sleep, tt as isAsyncIterable, wt as armDeadlineTimer } from "./sandbox-profile-compat-BxMQ1VXv.js";
+import { a as concreteProfileModel, c as profileModelExecutionSettings, i as concreteModelId, l as profileProviderModel, o as enforceTokenLimits, p as canonicalObservedModelParts, t as assertExecutableAgentProfile, v as harnessRunsAgent } from "./model-policy-GSxWwP-b.js";
+import { i as notifyRuntimeHookEvent } from "./runtime-hooks-CsW2pfFk.js";
+import { a as reconcileInterruptedSearchCalls, c as searchExecutor, r as dedicatedLane, x as runtimeShipDecision } from "./search-executor-B7g_5Wjl.js";
+import { a as downMessageRefusalReasons, h as createInMemoryRunContext, v as foldCoordinationRecords } from "./coordination-manager-BkVfWlMz.js";
+import { A as graphRouteWhenSchema, D as compileGraphParameters, E as bindGraphParameters, L as coordinationControlToolNames, O as graphTriggerBindingsSchema, T as assertGraphTriggerBindings, X as validateGraphTopology, f as graphDigest, h as graphRunsFor, k as graphFileSchema, m as graphRegistry, p as graphFromStored, q as validateFlowGraph, rt as kernelPromptRegistry, t as supervise, u as digestOfGraph, w as taskShapeDigest, x as recordGraphRun, y as lookupGraph, z as runBrainLoop } from "./supervise-CaeZcgAW.js";
+import "./run-cancellation-BLy_Zz-w.js";
+import { i as redactProtectedValue, r as redactProtectedReason } from "./protected-redaction-DilFZch5.js";
+import "./provision-supervisor-Bde_FF0R.js";
+import "./delegate-DgEie4ad.js";
+import "./graph-Cx0FhKSE.js";
 import { agentProfileSchema, canonicalAgentProfileDigest, canonicalCandidateDigest, sha256Bytes, validateAgentProfileSecurity } from "@tangle-network/agent-interface";
 import { CODING_HARNESSES, DEFAULT_TRACE_ANALYST_KINDS, InMemoryTraceStore, OUTPUT_VALUE, benjaminiHochberg, buildTrajectory, computeFindingId as computeFindingId$1, confidenceInterval, createTraceAnalyst, expandProfileAxes, makeFinding as makeFinding$1, pairedBootstrap, paretoFrontier, wilcoxonSignedRank, wilson } from "@tangle-network/agent-eval";
 import { createAgentRunOutcomeTracker } from "@tangle-network/sandbox/runtime";
 import { collectAgentResponseText } from "@tangle-network/sandbox";
-import { redact } from "@tangle-network/agent-eval/traces";
 import { z } from "zod";
+import { redact } from "@tangle-network/agent-eval/traces";
 import { createHash, createHmac, randomUUID } from "node:crypto";
 import { appendFileSync, chmodSync, constants, copyFileSync, lstatSync, mkdirSync, mkdtempSync, readlinkSync, rmSync, symlinkSync, writeFileSync } from "node:fs";
-import { dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
+import { dirname, extname, isAbsolute, join, relative, resolve, sep } from "node:path";
 import { execFile, execFileSync, spawn, spawnSync } from "node:child_process";
 import { chmod, link, lstat, mkdir, mkdtemp, open, opendir, readFile, readdir, readlink, realpath, rename, rm, stat, symlink, unlink, writeFile } from "node:fs/promises";
 import { promisify } from "node:util";
@@ -32,9 +32,10 @@ import { defineEvaluationClaim, summarizeEvaluationUnits } from "@tangle-network
 import { createInterface } from "node:readline";
 import { Worker } from "node:worker_threads";
 import { gzipSync } from "node:zlib";
+import { parseDocument } from "yaml";
 import { stuckLoopView, toolWasteView } from "@tangle-network/agent-eval/pipelines";
 import { sha256Hex } from "@tangle-network/agent-core/node";
-//#region src/durable/sql-run-store.ts
+// src/durable/sql-run-store.ts
 /** Refuses a competing or stale SQL run owner before it can publish new work. */
 var SqlRunOwnershipError = class extends Error {
 	constructor(message) {
@@ -293,8 +294,7 @@ function wait(ms, signal) {
 		else signal?.addEventListener("abort", abort, { once: true });
 	});
 }
-//#endregion
-//#region src/runtime/benchmark-report.ts
+// src/runtime/benchmark-report.ts
 /**
 * benchmark-report — turn a fleet of `RunRecord`s into a publishable, multi-axis benchmark report:
 * a ranked leaderboard, the full profile×axis score matrix, the cost/latency/token columns, and
@@ -623,9 +623,9 @@ function renderLeaderboardSvg(report) {
 			const x = labelW + c * cellW;
 			const s = r.perAxis[a];
 			if (s !== void 0) {
-				out.push(`<rect x="${x}" y="${y}" width="${cellW - 3}" height="${rowH - 4}" fill="${ramp(s)}"/>`);
-				out.push(`<text x="${x + (cellW - 3) / 2}" y="${y + 15}" text-anchor="middle" fill="white" font-size="10">${Math.round(100 * s)}</text>`);
-			} else out.push(`<rect x="${x}" y="${y}" width="${cellW - 3}" height="${rowH - 4}" fill="#f3f4f6"/>`);
+				out.push(`<rect x="${x}" y="${y}" width="51" height="22" fill="${ramp(s)}"/>`);
+				out.push(`<text x="${x + 51 / 2}" y="${y + 15}" text-anchor="middle" fill="white" font-size="10">${Math.round(100 * s)}</text>`);
+			} else out.push(`<rect x="${x}" y="${y}" width="51" height="22" fill="#f3f4f6"/>`);
 		});
 	});
 	out.push("</svg>");
@@ -658,8 +658,7 @@ ${rows}
 </tbody></table>
 </body></html>`;
 }
-//#endregion
-//#region src/runtime/completion.ts
+// src/runtime/completion.ts
 /** Decide whether a `CompletionVerdict` may end the node under the policy: authority scales with the verdict's determinism, and probabilistic verdicts must clear `minConfidence`. */
 function completionAuthorizes(v, policy) {
 	if (!v?.done) return false;
@@ -719,8 +718,7 @@ function deterministicCompletion(check) {
 		};
 	} };
 }
-//#endregion
-//#region src/runtime/isolated-checker.ts
+// src/runtime/isolated-checker.ts
 const toolchains = [
 	"/usr",
 	"/bin",
@@ -856,7 +854,7 @@ var InputLimitError = class extends Error {};
 async function copyBoundedTree(source, destination, maxBytes, maxEntries) {
 	let bytes = 0;
 	let entries = 0;
-	const buffer = Buffer.allocUnsafe(1024 * 1024);
+	const buffer = Buffer.allocUnsafe(1048576);
 	const visit = async (from, to, isRoot = false) => {
 		if (!isRoot && ++entries > (maxEntries ?? Number.MAX_SAFE_INTEGER)) throw new InputLimitError("Input tree exceeds maxInputEntries");
 		const info = await lstat(from);
@@ -1248,8 +1246,7 @@ async function removeScratch(path) {
 		throw new Error([permissionError, error].filter((value) => value !== void 0).map(String).join("; "));
 	}
 }
-//#endregion
-//#region src/runtime/declared-check.ts
+// src/runtime/declared-check.ts
 /**
 * A declared check: the one frozen evaluator program that decides "done" for a run, named by
 * digest, run by Runtime in a fresh box on the check account.
@@ -1282,7 +1279,7 @@ async function removeScratch(path) {
 const INPUT_DIR = "_input";
 const STATE_DIR = "state";
 const SEALED_DIR = "_sealed";
-const DEFAULT_TIMEOUT_MS = 15 * 6e4;
+const DEFAULT_TIMEOUT_MS = 9e5;
 /** Refuse a malformed declaration before any compute. */
 function assertDeclaredCheck(check, context) {
 	const fail = (message) => {
@@ -1489,8 +1486,7 @@ async function writeFiles(files, to) {
 		await writeFile(path, file.bytes, { mode: file.mode });
 	}
 }
-//#endregion
-//#region src/runtime/loop-dispatch.ts
+// src/runtime/loop-dispatch.ts
 /** Bridge a campaign `DispatchContext.trace` to a `LoopTraceEmitter` so every
 *  `loop.*` event lands as a span under the cell's scoped trace. */
 function campaignTraceToLoopEmitter(trace) {
@@ -1737,8 +1733,7 @@ function loopCampaignDispatch(opts) {
 function loopDispatch(opts) {
 	return (profile, scenario, ctx) => runLoopForCell(opts, scenario, profile, ctx);
 }
-//#endregion
-//#region src/runtime/inline-sandbox-client.ts
+// src/runtime/inline-sandbox-client.ts
 /**
 * The ONE pseudo-box adapter: present any one-shot `Executor` (router / bridge /
 * BYO) as a `SandboxClient` so the round-synchronous `runAgentRounds` can drive it
@@ -1782,8 +1777,10 @@ function inlineSandboxClient(factory, defaults = {}) {
 				const controller = new AbortController();
 				const callerSignal = opts?.signal;
 				const onAbort = () => controller.abort(callerSignal?.reason ?? /* @__PURE__ */ new Error("prompt aborted"));
-				if (callerSignal) if (callerSignal.aborted) onAbort();
-				else callerSignal.addEventListener("abort", onAbort, { once: true });
+				if (callerSignal) {
+					if (callerSignal.aborted) onAbort();
+					else callerSignal.addEventListener("abort", onAbort, { once: true });
+				}
 				const requestedProfile = (options?.backend && typeof options.backend === "object" ? options.backend.profile : void 0) ?? capturedDefaultProfile;
 				const parsedProfile = agentProfileSchema.safeParse(requestedProfile);
 				if (!parsedProfile.success) throw new Error("inlineSandboxClient: an exact AgentProfile is required; pass defaults.profile or create({ backend: { profile } })");
@@ -1852,8 +1849,7 @@ function inlineSandboxClient(factory, defaults = {}) {
 		};
 	} };
 }
-//#endregion
-//#region src/runtime/http-mcp-client.ts
+// src/runtime/http-mcp-client.ts
 /**
 * `connectHttpMcp` — the remote (streamable HTTP) MCP client, sibling of
 * `connectStdioMcp`. Same connection contract (`tools`, `callTool`, `close`),
@@ -2012,8 +2008,7 @@ async function connectHttpMcp(spec) {
 		throw error instanceof Error ? error : new Error(String(error));
 	}
 }
-//#endregion
-//#region src/runtime/key-provider.ts
+// src/runtime/key-provider.ts
 /** The env-backed provider: reads the (dotenvx-loaded) process env. Empty /
 *  whitespace-only values count as absent — fail loud, not with a blank key. */
 function envKeyProvider(env = process.env) {
@@ -2112,8 +2107,7 @@ async function resolveMcpServerLaunch(server, keys, label) {
 		...Object.keys(protectedEnv).length > 0 ? { protectedEnv } : {}
 	};
 }
-//#endregion
-//#region src/runtime/mcp-environment.ts
+// src/runtime/mcp-environment.ts
 /** POST JSON-RPC and parse a JSON body OR the last `data:` line of an SSE stream.
 *  Retries thrown fetches (transient network) with linear backoff; HTTP status and
 *  JSON-RPC errors are returned to the caller, not retried. */
@@ -2217,8 +2211,7 @@ function createMcpEnvironment(opts) {
 		}
 	};
 }
-//#endregion
-//#region src/runtime/stdio-mcp-client.ts
+// src/runtime/stdio-mcp-client.ts
 /**
 * Same-host stdio MCP: the ONE persistent newline-delimited JSON-RPC 2.0
 * connection to a spawned MCP server child process. This is the handshake
@@ -2454,7 +2447,10 @@ async function resolveRemoteMcpHeaders(server, keys, label) {
 */
 async function materializeLocalMcp(profile, opts = {}) {
 	const security = validateAgentProfileSecurity(profile, opts.profileSecurityPolicy);
-	if (!security.ok) throw new ValidationError(`materializeLocalMcp: profile host execution refused: ${security.issues.filter((issue) => issue.level === "error").map((issue) => issue.message).join("; ")}`);
+	if (!security.ok) {
+		const reasons = security.issues.filter((issue) => issue.level === "error").map((issue) => issue.message).join("; ");
+		throw new ValidationError(`materializeLocalMcp: profile host execution refused: ${reasons}`);
+	}
 	const maxResultChars = opts.maxResultChars ?? 2e3;
 	const connections = [];
 	const routes = /* @__PURE__ */ new Map();
@@ -2540,8 +2536,7 @@ async function materializeLocalMcp(profile, opts = {}) {
 		close
 	};
 }
-//#endregion
-//#region src/runtime/local-sandbox-client.ts
+// src/runtime/local-sandbox-client.ts
 /**
 * `localSandboxClient` — the SAME-HOST pseudo-box: a `SandboxClient` whose
 * `create()` MATERIALIZES the profile's stdio MCP servers as local child
@@ -2657,8 +2652,7 @@ function localSandboxClient(opts) {
 		};
 	} };
 }
-//#endregion
-//#region src/runtime/resolve-sandbox-client.ts
+// src/runtime/resolve-sandbox-client.ts
 /**
 * The product-facing backend selector: one call picks the execution transport a
 * `runAgentRounds` (or any consumer that drives a `SandboxClient`) runs on, from the
@@ -2719,8 +2713,7 @@ function resolveSandboxClient(opts) {
 		}
 	}
 }
-//#endregion
-//#region src/runtime/define-leaderboard.ts
+// src/runtime/define-leaderboard.ts
 /**
 * `defineLeaderboard` — the declarative eval-leaderboard facade.
 *
@@ -3069,8 +3062,7 @@ function defineLeaderboard(spec) {
 		toBenchmarkAdapter: () => leaderboardBenchmarkAdapter(spec)
 	};
 }
-//#endregion
-//#region src/runtime/harvest-corpus.ts
+// src/runtime/harvest-corpus.ts
 /**
 * Analyze completed runs through the selected observer and retain findings in a corpus.
 *
@@ -3167,8 +3159,7 @@ async function harvestCorpus(opts) {
 	if (report.runsObserved === 0 && report.failures.length > 0) throw new HarvestError(report);
 	return report;
 }
-//#endregion
-//#region src/runtime/in-process-sandbox-client.ts
+// src/runtime/in-process-sandbox-client.ts
 /**
 * The ONE in-process pseudo-box: present a plain user callback as a
 * `SandboxClient` so an example or test can drive `runAgentRounds` / `openSandboxRun`
@@ -3288,8 +3279,7 @@ function inProcessSandboxClient(options) {
 		};
 	} };
 }
-//#endregion
-//#region src/runtime/observation-registry.ts
+// src/runtime/observation-registry.ts
 /** Adapt any Eval analyst registry, including recursive engines, to observation and harvesting. */
 function observationFromRegistry(registry, options) {
 	if (!["production", "search"].includes(options.proposalOrigin)) throw new TypeError("registry observation requires an explicit production or search origin");
@@ -3328,8 +3318,7 @@ function observationFromRegistry(registry, options) {
 		}
 	};
 }
-//#endregion
-//#region src/runtime/personify/analyst.ts
+// src/runtime/personify/analyst.ts
 /**
 * The diagnosis a combinator steers from must be TRACE-derived, never JUDGE-derived. A finding
 * whose evidence is a judge/verdict score (an `EvidenceRef` of `kind:'metric'` with a
@@ -3452,8 +3441,7 @@ function observedBestScore(settledSoFar) {
 	}
 	return best;
 }
-//#endregion
-//#region src/runtime/personify/combinators.ts
+// src/runtime/personify/combinators.ts
 /**
 *
 * The generic combinator library — the content-free act-bodies the wave's §1 contract froze.
@@ -3915,8 +3903,7 @@ function blocked(blockers) {
 		blockers
 	};
 }
-//#endregion
-//#region src/runtime/personify/corpus.ts
+// src/runtime/personify/corpus.ts
 const corpusSchemaVersion = "1.0.0";
 /**
 * Assert a value is a well-formed `CorpusRecord`. A PROVENANCE-and-shape check: every
@@ -4121,8 +4108,7 @@ async function renderCorpusToInstructions(opts) {
 function renderLine(record) {
 	return record.rationale ? `${record.claim} (${record.rationale})` : record.claim;
 }
-//#endregion
-//#region src/runtime/personify/registry.ts
+// src/runtime/personify/registry.ts
 /**
 *
 * The loop-shape registry — the OPEN, content-free extension point for the personify layer.
@@ -4170,8 +4156,7 @@ function createShapeRegistry() {
 /** The default registry `runPersonified` resolves a shape name against. Empty by construction —
 *  a caller registers its own composed shapes; the engine ships no domain shape. */
 const builtinShapes = createShapeRegistry();
-//#endregion
-//#region src/runtime/personify/persona.ts
+// src/runtime/personify/persona.ts
 /**
 *
 * The personify layer impl — `definePersona` (the thin builder) + `runPersonified` (composes
@@ -4353,8 +4338,7 @@ function mergeSeams(ctx, seams) {
 		}
 	};
 }
-//#endregion
-//#region src/runtime/personify/trajectory.ts
+// src/runtime/personify/trajectory.ts
 /**
 *
 * Trajectory trace + cost ledger — the post-hoc tree reconstructor (§4 of `wave-types`).
@@ -4581,8 +4565,7 @@ function requireSpend(rolled, id, root) {
 	if (!spend) throw new Error(`trajectoryReport: node '${id}' was never rolled up in tree '${root}' (unreachable from root)`);
 	return spend;
 }
-//#endregion
-//#region src/runtime/durable-sync.ts
+// src/runtime/durable-sync.ts
 /**
 * Threads that run fsync for the private CAS. Node runs every fs call on libuv's pool of four
 * threads, and an fsync on a busy disk holds its thread until the filesystem journal commits. On
@@ -4710,8 +4693,7 @@ async function syncDirectory(directory) {
 		await handle.close();
 	}
 }
-//#endregion
-//#region src/runtime/private-cas-objects.ts
+// src/runtime/private-cas-objects.ts
 /**
 * The local object store of a private CAS: where an object lives, how it is written, read back
 * and verified, and how a locator is checked. An object's name is published only after its bytes
@@ -4784,7 +4766,7 @@ async function* readObject(path, ref, signal) {
 		if (!stats.isFile() || stats.size !== ref.byteLength) throw new Error("private CAS object failed digest or length verification");
 		yield* checkedChunks(file.createReadStream({
 			autoClose: false,
-			highWaterMark: 64 * 1024
+			highWaterMark: 65536
 		}), ref, signal);
 	} finally {
 		await file.close();
@@ -4966,8 +4948,7 @@ async function putPrivateCasBuffered(layout, offload, object, signal) {
 	}, signal);
 	return ref;
 }
-//#endregion
-//#region src/runtime/private-cas-offload.ts
+// src/runtime/private-cas-offload.ts
 /**
 * Durable copies of a private CAS, and the offload passes that make them: one object at a time to
 * the off-host store, with a stall bound, retries, a receipt on the host once the store holds the
@@ -5170,7 +5151,8 @@ var PrivateCasOffload = class {
 	async copyObjects(objects) {
 		const { durable } = this.layout;
 		let refusal;
-		return mapWithConcurrency(objects, durable === void 0 || durable.putStream && durable.getStream ? OFFLOAD_COPIES_AT_ONCE : 1, async ({ hex, path, size }) => {
+		const streams = durable === void 0 || durable.putStream && durable.getStream;
+		return mapWithConcurrency(objects, streams ? OFFLOAD_COPIES_AT_ONCE : 1, async ({ hex, path, size }) => {
 			await this.copier.waitForCopy(hex);
 			if (await hasReceipt(this.layout, hex)) return {
 				hex,
@@ -5364,8 +5346,7 @@ function createDurableCopier(layout) {
 		}
 	};
 }
-//#endregion
-//#region src/runtime/private-cas.ts
+// src/runtime/private-cas.ts
 const SAFE_NAMESPACE = /^[a-zA-Z0-9][a-zA-Z0-9._-]{0,127}$/u;
 const DURABLE_STALL_MS = 12e4;
 /**
@@ -5430,8 +5411,7 @@ function createPrivateCasArtifactPort(root, namespace, options = {}) {
 	if (durable === void 0) markPutStreamVerified(putStream, readStream);
 	return port;
 }
-//#endregion
-//#region src/runtime/run-benchmark.ts
+// src/runtime/run-benchmark.ts
 /**
 * runBenchmark — the packaged optimization suite. Define a domain by implementing an
 * `Environment` (open / tools / call / score / close); get the optimization strategies
@@ -5644,10 +5624,9 @@ function printBenchmarkReport(report) {
 		console.log(`  refine − sample: ${pp(l.mean)}  CI [${pp(l.low)}, ${pp(l.high)}]  (${sig})`);
 	}
 }
-//#endregion
-//#region src/runtime/s3-private-cas-namespace.ts
+// src/runtime/s3-private-cas-namespace.ts
 const NAMESPACE$1 = /^[a-zA-Z0-9][a-zA-Z0-9._-]{0,127}$/u;
-const MAX_PAGE_BYTES = 2 * 1024 * 1024;
+const MAX_PAGE_BYTES = 2097152;
 const fingerprint = (namespace, location, storeIdentity, objects) => `sha256:${createHash("sha256").update(JSON.stringify({
 	namespace,
 	location,
@@ -5827,8 +5806,7 @@ function privateCasNamespaceOperations({ request, refusal, prefix, location, sto
 		}
 	};
 }
-//#endregion
-//#region src/runtime/s3-private-cas-request.ts
+// src/runtime/s3-private-cas-request.ts
 const EMPTY_PAYLOAD = createHash("sha256").update("").digest("hex");
 const hex$1 = (value) => createHash("sha256").update(value).digest("hex");
 const hmac = (key, value) => createHmac("sha256", key).update(value).digest();
@@ -5861,14 +5839,15 @@ function createPrivateCasS3Transport(options, endpoint) {
 			payloadHash
 		].join("\n");
 		const scope = `${day}/${region}/s3/aws4_request`;
-		const signature = createHmac("sha256", hmac(hmac(hmac(hmac(`AWS4${options.secretAccessKey}`, day), region), "s3"), "aws4_request")).update([
+		const signingKey = hmac(hmac(hmac(hmac(`AWS4${options.secretAccessKey}`, day), region), "s3"), "aws4_request");
+		const signature = createHmac("sha256", signingKey).update([
 			"AWS4-HMAC-SHA256",
 			amzDate,
 			scope,
 			hex$1(canonical)
 		].join("\n")).digest("hex");
 		const { host: _host, ...sent } = signed;
-		const deadline = AbortSignal.timeout(timeoutMs + Math.ceil((byteLength ?? (body instanceof Uint8Array ? body.byteLength : 0)) / (1024 * 1024)) * 1e3);
+		const deadline = AbortSignal.timeout(timeoutMs + Math.ceil((byteLength ?? (body instanceof Uint8Array ? body.byteLength : 0)) / 1048576) * 1e3);
 		return await send(url, {
 			method,
 			headers: {
@@ -5900,14 +5879,13 @@ function createPrivateCasS3Transport(options, endpoint) {
 		refusal
 	};
 }
-//#endregion
-//#region src/runtime/s3-private-cas-store.ts
+// src/runtime/s3-private-cas-store.ts
 const DIGEST = /^sha256:([0-9a-f]{64})$/u;
 const BUCKET = /^[a-z0-9][a-z0-9.-]{1,61}[a-z0-9]$/u;
 const PREFIX = /^(?:[A-Za-z0-9._-]+\/)*$/u;
 const NAMESPACE = /^[a-zA-Z0-9][a-zA-Z0-9._-]{0,127}$/u;
 const POINTER_NAME = /^(?!sha256\/)[a-zA-Z0-9][a-zA-Z0-9._-]{0,127}(?:\/[a-zA-Z0-9][a-zA-Z0-9._-]{0,127}){0,3}$/u;
-const POINTER_MAX_BYTES = 1024 * 1024;
+const POINTER_MAX_BYTES = 1048576;
 const CONTENT_TYPE = "application/octet-stream";
 const METADATA_DIGEST = "x-amz-meta-sha256";
 const hex = (value) => createHash("sha256").update(value).digest("hex");
@@ -6073,8 +6051,7 @@ function createS3PrivateCasStore(options) {
 		}
 	};
 }
-//#endregion
-//#region src/runtime/box-read-retry.ts
+// src/runtime/box-read-retry.ts
 /**
 * One bounded-retry read over a sandbox box's filesystem, shared by every caller that reads a
 * path the agent may have just written.
@@ -6117,8 +6094,7 @@ async function readBoxPathWithRetry(read, path, options) {
 		error: lastError
 	};
 }
-//#endregion
-//#region src/runtime/sandbox-run.ts
+// src/runtime/sandbox-run.ts
 /**
 * Thrown when a turn is aborted/timed-out mid-settle. Carries the events drained
 * BEFORE the abort fired (and any in-progress `readError`) so an aborted run is
@@ -6386,8 +6362,7 @@ function hashText(value) {
 	}
 	return (hash >>> 0).toString(16).padStart(8, "0");
 }
-//#endregion
-//#region src/runtime/strategy-evolution-cells.ts
+// src/runtime/strategy-evolution-cells.ts
 /**
 * Cells run in this process on one dedicated lane of Runtime's search executor, which
 * records each finished attempt under its run id (a restarted search adopts it instead of
@@ -6543,7 +6518,8 @@ function unknownAccounting(reason) {
 }
 /** Free text as the ledger stores it: redacted with the share profile and bounded. */
 function shareText(error) {
-	return redact(error instanceof Error ? error.message : String(error), { profile: "share" }).value.slice(0, 300);
+	const text = error instanceof Error ? error.message : String(error);
+	return redact(text, { profile: "share" }).value.slice(0, 300);
 }
 const STRATEGY_EVOLUTION_SOURCE = {
 	uri: "npm:@tangle-network/agent-runtime#runStrategyEvolution",
@@ -6560,10 +6536,10 @@ const STRATEGY_EVOLUTION_SOURCE = {
 /** Check every option and derive the search's identity; throws `ConfigError` on a bad one. */
 function planStrategyEvolution(cfg) {
 	const root = cfg.root ?? refine;
-	const budget = positiveInteger("budget", cfg.budget ?? 3);
-	const concurrency = positiveInteger("concurrency", cfg.concurrency ?? 3);
+	const budget = positiveInteger$1("budget", cfg.budget ?? 3);
+	const concurrency = positiveInteger$1("concurrency", cfg.concurrency ?? 3);
 	const maxExpansions = nonNegativeInteger("maxExpansions", cfg.maxExpansions ?? 4);
-	const maxAttempts = positiveInteger("maxAttempts", cfg.maxAttempts ?? 3);
+	const maxAttempts = positiveInteger$1("maxAttempts", cfg.maxAttempts ?? 3);
 	const seed = nonNegativeInteger("seed", cfg.seed ?? 42);
 	const cellUsd = dollars("cellUsd", cfg.cellUsd) ?? 0;
 	const maxUsd = dollars("maxUsd", cfg.maxUsd);
@@ -6686,7 +6662,7 @@ function searchTasks(claim, tasks) {
 		}
 	}));
 }
-function positiveInteger(name, value) {
+function positiveInteger$1(name, value) {
 	if (!Number.isSafeInteger(value) || value < 1) throw new ConfigError(`evolution: ${name} must be a positive integer`);
 	return value;
 }
@@ -6699,8 +6675,7 @@ function dollars(name, value) {
 	if (!Number.isFinite(value) || value < 0) throw new ConfigError(`evolution: ${name} must be a finite non-negative number`);
 	return value;
 }
-//#endregion
-//#region src/runtime/strategy-evolution.ts
+// src/runtime/strategy-evolution.ts
 /**
 * runStrategyEvolution: strategy search on Eval's search kernel (`runSearch`).
 *
@@ -7102,8 +7077,7 @@ function strategyNames(state, recorder, codec) {
 	}
 	return names;
 }
-//#endregion
-//#region src/runtime/supervise/chat-transport-executor.ts
+// src/runtime/supervise/chat-transport-executor.ts
 /**
 * A session-owning composition over Runtime's canonical Router tool-loop executor.
 *
@@ -7171,7 +7145,8 @@ function buildChatTransportExecutor(opts, context) {
 		profile,
 		harness: null
 	};
-	return mapExecutorResult(createExecutor(config)(spec, context), (result) => {
+	const inner = createExecutor(config)(spec, context);
+	return mapExecutorResult(inner, (result) => {
 		const raw = result.out;
 		const content = typeof raw?.content === "string" ? raw.content : "";
 		return {
@@ -7224,8 +7199,7 @@ function chatWorkerSeam(opts) {
 		};
 	};
 }
-//#endregion
-//#region src/runtime/supervise/designer-tools.ts
+// src/runtime/supervise/designer-tools.ts
 /**
 * `graphDesignerExtraTools` — the designer's toolset on the existing
 * `RunGraphOptions.extraTools` seam.
@@ -7353,7 +7327,7 @@ function graphDesignerExtraTools(env) {
 			})();
 			if (name === "designer_history") return (async () => {
 				const args = asRecord(raw ?? {}, "designer_history");
-				const { listGraphRuns } = await import("./supervise-BGfm2GlY.js").then((n) => n.g);
+				const { listGraphRuns } = await import("./supervise-CaeZcgAW.js").then((n) => n.g);
 				const all = await listGraphRuns(registry);
 				return { runs: (args.taskShape === void 0 ? all : all.filter((row) => row.taskDigest === taskShapeDigest(asRecord(args.taskShape, "designer_history.taskShape")))).map(summarize) };
 			})();
@@ -7364,7 +7338,7 @@ function graphDesignerExtraTools(env) {
 				if (mode === "replay") {
 					const digest = args.graphDigest;
 					if (typeof digest !== "string" || digest.length === 0) throw new ValidationError("designer_run_graph: replay mode requires graphDigest from lookup");
-					const { loadGraph } = await import("./supervise-BGfm2GlY.js").then((n) => n.g);
+					const { loadGraph } = await import("./supervise-CaeZcgAW.js").then((n) => n.g);
 					const stored = await loadGraph(registry, digest);
 					if (!stored) throw new ValidationError(`designer_run_graph: no stored graph ${digest.slice(0, 12)} — re-lookup`);
 					const graph = env.bindCheck(graphFromStored(stored, () => {
@@ -7403,8 +7377,269 @@ function graphDesignerExtraTools(env) {
 		};
 	}
 }
-//#endregion
-//#region src/runtime/supervise/graph-session-observation.ts
+// src/runtime/supervise/graph-file.ts
+/** A provider name in authored data needs an environment-owned canonical connection binding. */
+var GraphFileResolutionError = class extends Error {
+	provider;
+	node;
+	code = "CONNECTION_REQUIRED";
+	fixCommand = "tangle graph run --help";
+	constructor(provider, node) {
+		super(`loadGraphFile: node ${node} needs an environment binding for provider ${provider}`);
+		this.provider = provider;
+		this.node = node;
+		this.name = "GraphFileResolutionError";
+	}
+};
+function refuse$2(message) {
+	throw new ValidationError(`loadGraphFile: ${message}`);
+}
+function jsonData(value, visiting = /* @__PURE__ */ new Set()) {
+	if (value === null || typeof value === "string" || typeof value === "boolean") return;
+	if (typeof value === "number" && Number.isFinite(value)) return;
+	if (!value || typeof value !== "object" || visiting.has(value)) refuse$2("definition must be finite, acyclic JSON data");
+	visiting.add(value);
+	for (const child of Object.values(value)) jsonData(child, visiting);
+	visiting.delete(value);
+}
+function bindParameters(raw, supplied) {
+	const definitions = graphFileSchema.shape.params.parse(raw.params) ?? {};
+	for (const key of Object.keys(supplied ?? {})) if (!Object.hasOwn(definitions, key)) refuse$2(`unknown parameter ${key}`);
+	return Object.fromEntries(Object.entries(definitions).map(([key, definition]) => {
+		let value = supplied && Object.hasOwn(supplied, key) ? supplied[key] : definition.default;
+		if (value === void 0) refuse$2(`missing parameter ${key}`);
+		const type = definition.type;
+		if (typeof value === "string" && type && type !== "string") try {
+			value = JSON.parse(value);
+		} catch {
+			refuse$2(`parameter ${key} must be ${type}`);
+		}
+		if (type) {
+			if (!(type === "integer" ? Number.isSafeInteger(value) : type === "null" ? value === null : type === "array" ? Array.isArray(value) : type === "object" ? value !== null && typeof value === "object" && !Array.isArray(value) : typeof value === type)) refuse$2(`parameter ${key} must be ${type}`);
+		}
+		jsonData(value);
+		return [key, value];
+	}));
+}
+async function expandProfile(node, options) {
+	if (node.id === "params" || node.id === "trigger") refuse$2(`reserved node id ${node.id}`);
+	const authored = options.seat ?? options.nodeSeats?.[node.id] ?? node.seat;
+	const resolveSeat = options.resolveSeat;
+	const context = {
+		node: node.id,
+		cwd: options.cwd,
+		signal: options.signal
+	};
+	let selected;
+	if (authored !== void 0) {
+		if (!resolveSeat) refuse$2(`node ${node.id} has unresolved seat shorthand; supply resolveSeat from Bridge login inventory or a canonical profile`);
+		const candidates = typeof authored === "string" ? [authored] : authored;
+		if (!candidates.length) refuse$2(`node ${node.id} has an empty seat preference list`);
+		for (const [index, candidate] of candidates.entries()) {
+			selected = await resolveSeat(candidate, {
+				...context,
+				lastCandidate: index === candidates.length - 1
+			});
+			if (selected) break;
+		}
+		if (!selected) refuse$2(`node ${node.id} has no available Bridge seat; sign in through Bridge or choose another seat`);
+	} else if (Array.isArray(node.profile?.seats)) {
+		const parsed = agentProfileSchema.safeParse({
+			...node.profile,
+			name: node.id
+		});
+		if (!parsed.success) refuse$2(`node ${node.id} has an invalid profile: ${parsed.error.message}`);
+	} else if (!node.profile?.harness || !concreteProfileModel(node.profile) || !node.profile.model?.provider) {
+		selected = options.seats?.[0] ?? await resolveSeat?.(void 0, {
+			...context,
+			lastCandidate: true
+		});
+		if (!selected) refuse$2(`node ${node.id} needs a canonical profile or resolveSeat from Bridge login inventory`);
+	}
+	const connections = node.needs?.map((provider) => {
+		if (!options.needs || !Object.hasOwn(options.needs, provider)) throw new GraphFileResolutionError(provider, node.id);
+		return options.needs[provider];
+	});
+	const { seats: _authoredSeats, ...authoredProfile } = node.profile ?? {};
+	const profile = {
+		...selected ? authoredProfile : node.profile,
+		name: node.id,
+		...selected ? {
+			harness: selected.harness,
+			model: {
+				...node.profile?.model,
+				provider: selected.provider,
+				default: selected.model,
+				...selected.reasoningEffort === void 0 ? {} : { reasoningEffort: selected.reasoningEffort }
+			}
+		} : {},
+		...connections ? { connections: [...node.profile?.connections ?? [], ...connections] } : {}
+	};
+	const parsed = agentProfileSchema.safeParse(profile);
+	if (!parsed.success) refuse$2(`node ${node.id} has an invalid profile: ${parsed.error.message}`);
+	assertExecutableAgentProfile(parsed.data, `loadGraphFile node ${node.id}`);
+	return parsed.data;
+}
+/** Parse the canonical YAML/JSON file into content-addressed Runtime graph data, offline. */
+async function loadGraphFile(file, options = {}) {
+	if (![
+		".yaml",
+		".yml",
+		".json"
+	].includes(extname(file).toLowerCase())) refuse$2("file must be YAML or JSON");
+	const text = options.source ?? await readFile(file, "utf8");
+	const document = parseDocument(text, {
+		uniqueKeys: true,
+		strict: true
+	});
+	if (document.errors.length) refuse$2(document.errors.map((error) => error.message).join("; "));
+	if (document.warnings.length) refuse$2(document.warnings.map((warning) => warning.message).join("; "));
+	const raw = extname(file).toLowerCase() === ".json" ? JSON.parse(text) : document.toJS({ maxAliasCount: 100 });
+	jsonData(raw);
+	if (!raw || typeof raw !== "object" || Array.isArray(raw)) refuse$2("definition must be an object");
+	const source = raw;
+	if (Array.isArray(source.nodes) && source.nodes.some((node) => node && typeof node === "object" && "call" in node)) refuse$2("call vertices are not supported by this loader");
+	const params = bindParameters(source, options.params);
+	const { params: _definitions, on, ...authored } = source;
+	const bindings = {
+		params,
+		trigger: options.trigger
+	};
+	const bindingOptions = options.trigger === void 0 ? { defer: ["trigger"] } : {};
+	const compiled = compileGraphParameters(authored, bindings, bindingOptions);
+	const bound = graphFileSchema.parse(compiled.value);
+	const boundOn = on === void 0 ? void 0 : bindGraphParameters(on, bindings, bindingOptions);
+	if (bound.check && bound.deliverable) refuse$2("use check or deliverable, not both");
+	let deliverable = bound.deliverable;
+	if (bound.check) {
+		if ("command" in bound.check) deliverable = {
+			...(bound.check.describe ?? bound.describe) === void 0 ? {} : { describe: bound.check.describe ?? bound.describe },
+			checkRef: "command",
+			command: bound.check.command
+		};
+		else {
+			const { describe, ...condition } = "describe" in bound.check ? bound.check : {
+				...bound.check,
+				describe: void 0
+			};
+			deliverable = {
+				...(describe ?? bound.describe) === void 0 ? {} : { describe: describe ?? bound.describe },
+				checkRef: "route",
+				when: condition
+			};
+		}
+	}
+	if (!deliverable) refuse$2("check or deliverable is required");
+	if (deliverable.checkRef === "route" && !deliverable.when) refuse$2("route deliverable requires when");
+	if (deliverable.checkRef === "command" && !deliverable.command) refuse$2("command deliverable requires command");
+	const nodes = await Promise.all(bound.nodes.map(async (node) => ({
+		id: node.id,
+		profile: await expandProfile(node, {
+			...options,
+			cwd: options.cwd ?? dirname(file)
+		})
+	})));
+	const nodeIds = new Set(nodes.map((node) => node.id));
+	for (const id of Object.keys(options.nodeSeats ?? {})) if (!nodeIds.has(id)) refuse$2(`seat override references unknown node ${id}`);
+	if (deliverable.when) {
+		for (const condition of "all" in deliverable.when ? deliverable.when.all : [deliverable.when]) if (condition.node !== void 0 && !nodeIds.has(condition.node)) refuse$2(`check references unknown node ${condition.node}`);
+	}
+	const topology = {
+		nodes,
+		edges: bound.edges,
+		budget: bound.budget,
+		deliverable,
+		...bound.entry ? { entry: bound.entry.map((entry) => typeof entry === "string" ? {
+			node: entry,
+			task: {}
+		} : entry) } : {},
+		...bound.gates ? { gates: bound.gates } : {}
+	};
+	const triggerBindings = compiled.triggerBindings.flatMap((slot) => {
+		const [top, index, field, ...tail] = slot.path;
+		if (top === "nodes") {
+			if (field === "id") return [slot, {
+				...slot,
+				path: [
+					"nodes",
+					index,
+					"profile",
+					"name"
+				]
+			}];
+			if (field === "profile") {
+				if (tail[0] === "name") return [];
+				if (tail[0] === "harness" || tail[0] === "model" && [
+					"provider",
+					"default",
+					"reasoningEffort"
+				].includes(String(tail[1]))) {
+					let before = bound.nodes[index].profile;
+					let after = nodes[index].profile;
+					for (const key of tail) {
+						before = before?.[key];
+						after = after?.[key];
+					}
+					if (before !== after) return [];
+				}
+				return [slot];
+			}
+			refuse$2("trigger slots in seat/needs must be supplied to loadGraphFile before profile resolution");
+		}
+		if (top === "check") {
+			if (index === "describe") return [{
+				...slot,
+				path: ["deliverable", "describe"]
+			}];
+			return [{
+				...slot,
+				path: [
+					"deliverable",
+					index === "command" ? "command" : "when",
+					...index === "command" ? slot.path.slice(2) : slot.path.slice(1)
+				]
+			}];
+		}
+		if (top === "describe") return bound.check?.describe !== void 0 || bound.deliverable ? [] : [{
+			...slot,
+			path: ["deliverable", "describe"]
+		}];
+		if (top === "entry" && slot.path.length === 2) return [{
+			...slot,
+			path: [
+				"entry",
+				index,
+				"node"
+			]
+		}];
+		return [
+			"edges",
+			"budget",
+			"gates",
+			"entry",
+			"deliverable"
+		].includes(String(top)) ? [slot] : [];
+	});
+	assertGraphTriggerBindings(topology, triggerBindings);
+	const content = {
+		...topology,
+		triggerBindings
+	};
+	const registry = options.registry ?? kernelPromptRegistry();
+	if (content.entry) validateFlowGraph(content, registry, options.analysts);
+	else validateGraphTopology(content.nodes, content.edges, registry, options.analysts);
+	const digest = graphDigest(content);
+	if (bound.digest !== void 0 && bound.digest !== digest) refuse$2("supplied digest does not match the materialized graph");
+	return {
+		graph: {
+			...content,
+			digest
+		},
+		params,
+		...boundOn === void 0 ? {} : { on: boundOn }
+	};
+}
+// src/runtime/supervise/graph-session-observation.ts
 function measured(fact) {
 	return fact && !fact.partial && fact.value !== null ? fact.value : void 0;
 }
@@ -7588,8 +7823,7 @@ function graphFromSessionFacts(facts, options) {
 		}
 	};
 }
-//#endregion
-//#region src/runtime/supervise/profile-registry.ts
+// src/runtime/supervise/profile-registry.ts
 /**
 * `profile-registry` — named AgentProfiles with run receipts: the missing
 * bottom layer of the designer's memory.
@@ -7641,7 +7875,8 @@ async function recordProfileRun(reg, profile, record) {
 	await withJsonlFileLock(join(reg.root, RECORDS_FILE), async (canonicalPath) => {
 		const file = join(reg.root, PROFILES_DIR, `${digest}.json`);
 		try {
-			if (canonicalAgentProfileDigest(JSON.parse(await readFile(file, "utf8"))) !== digest) throw new ValidationError(`profile-registry: revision ${digest.slice(0, 12)} is immutable but its stored copy differs — refusing to overwrite`);
+			const existing = JSON.parse(await readFile(file, "utf8"));
+			if (canonicalAgentProfileDigest(existing) !== digest) throw new ValidationError(`profile-registry: revision ${digest.slice(0, 12)} is immutable but its stored copy differs — refusing to overwrite`);
 		} catch (error) {
 			if (!isNoEntError(error)) throw error;
 			writeAtomicDurableFile(file, JSON.stringify(profile));
@@ -7689,14 +7924,14 @@ async function bestProfileFor(reg, name) {
 		record: best
 	} : void 0;
 }
-//#endregion
-//#region src/runtime/supervise/remote-supervisor.ts
+// src/runtime/supervise/remote-supervisor.ts
 const agentSchema = z.object({
 	id: z.string(),
 	parent: z.string().optional(),
 	label: z.string(),
 	status: z.string(),
-	runtime: z.string()
+	runtime: z.string(),
+	failure: runtimeFailureCauseSchema.optional()
 }).passthrough();
 const treeSchema = z.object({
 	root: z.string(),
@@ -7722,38 +7957,98 @@ const eventPageSchema = z.discriminatedUnion("status", [z.object({
 	historyExpired: z.boolean(),
 	remaining: z.number().int().nonnegative()
 })]);
-/** Connect with the server's readOnly URL and protected headers; credentials never enter a profile. */
-async function connectRemoteSupervisor(spec) {
-	const connection = await connectHttpMcp(spec);
-	if (!connection.tools.some((tool) => tool.name === "observe_agent")) {
-		await connection.close();
-		throw new ValidationError("remote supervisor does not expose observe_agent");
-	}
-	const call = async (args) => {
-		const text = await connection.callTool("observe_agent", args);
-		if (text.startsWith("ERROR:")) throw new ValidationError(text);
-		const result = z.record(z.string(), z.unknown()).parse(JSON.parse(text));
+const steerSchema = z.discriminatedUnion("delivered", [z.object({
+	delivered: z.literal(true),
+	progress: z.record(z.string(), z.unknown()).nullable()
+}), z.object({
+	delivered: z.literal(false),
+	outcome: z.custom((value) => typeof value === "string" && value !== "delivered" && Object.hasOwn(downMessageRefusalReasons, value)),
+	reason: z.string(),
+	progress: z.record(z.string(), z.unknown()).nullable()
+})]);
+const workerCounts = {
+	live: z.number().int().nonnegative(),
+	queued: z.number().int().nonnegative()
+};
+const cancelSchema = z.union([
+	z.object({
+		cancelled: z.literal(true),
+		workerId: z.string(),
+		label: z.string(),
+		...workerCounts
+	}),
+	z.object({
+		released: z.literal(true),
+		workerId: z.string(),
+		...workerCounts
+	}),
+	z.object({
+		error: z.literal("not-live"),
+		reason: z.string(),
+		...workerCounts
+	})
+]);
+async function callRemoteSupervisor(connection, tool, args) {
+	const text = await connection.callTool(tool, args);
+	if (text.startsWith("ERROR:")) throw new ValidationError(text);
+	return z.record(z.string(), z.unknown()).parse(JSON.parse(text));
+}
+function supervisorReader(connection) {
+	const observe = async (args) => {
+		const result = await callRemoteSupervisor(connection, "observe_agent", args);
 		if (result.error) throw new ValidationError(`remote supervisor refused observation: ${String(result.error)}`);
 		return result;
 	};
 	return {
-		tree: async () => treeSchema.parse((await call({ tree: true })).tree),
+		tree: async () => treeSchema.parse((await observe({ tree: true })).tree),
 		observe: async (workerId, cursor) => {
-			const agent = await call({
+			const agent = await observe({
 				workerId,
 				events: true,
 				...cursor ? { eventCursor: cursor } : {}
 			});
 			return {
-				agent,
+				agent: agentSchema.parse(agent),
 				events: eventPageSchema.parse(agent.events)
 			};
 		},
 		close: () => connection.close()
 	};
 }
-//#endregion
-//#region src/runtime/supervise/search-spec.ts
+/** Connect with the server's readOnly URL and protected headers; credentials never enter a profile. */
+async function connectRemoteSupervisor(spec) {
+	const connection = await connectHttpMcp(spec);
+	if (!connection.tools.some((tool) => tool.name === "observe_agent")) {
+		await connection.close();
+		throw new ValidationError("remote supervisor does not expose observe_agent");
+	}
+	return supervisorReader(connection);
+}
+/** Connect with the dedicated /control capability, keeping credentials on the protected transport. */
+async function connectRemoteSupervisorControl(access) {
+	const connection = await connectHttpMcp({
+		url: access.url,
+		protectedHeaders: { ...access.headers }
+	});
+	const granted = new Set(connection.tools.map((tool) => tool.name));
+	if (granted.size !== coordinationControlToolNames.length || !coordinationControlToolNames.every((tool) => granted.has(tool))) {
+		await connection.close();
+		throw new ValidationError("remote supervisor control requires the exact operator tool set");
+	}
+	return {
+		...supervisorReader(connection),
+		steer: async (workerId, instruction, options = {}) => steerSchema.parse(await callRemoteSupervisor(connection, "steer_agent", {
+			workerId,
+			instruction,
+			...options.interrupt === void 0 ? {} : { interrupt: options.interrupt }
+		})),
+		cancel: async (workerId, reason) => cancelSchema.parse(await callRemoteSupervisor(connection, "cancel_worker", {
+			workerId,
+			...reason === void 0 ? {} : { reason }
+		}))
+	};
+}
+// src/runtime/supervise/search-spec.ts
 /**
 * SearchSpec: one data value for a multi-agent research configuration, and the compiler that maps
 * it onto exactly one existing call, `supervise(profile, task, options)` or `runGraph(graph,
@@ -7773,32 +8068,32 @@ async function connectRemoteSupervisor(spec) {
 *  caller that supplies it is refused. */
 const SEARCH_SPEC_CORRELATION_KEY = "searchSpecDigest";
 const SPAWN_GRANT = `${coordinationProfileToolPrefix}spawn_worker`;
-function refuse(message) {
+function refuse$1(message) {
 	throw new ValidationError(`SearchSpec: ${message}`);
 }
 const quoted = (values) => values.map((v) => `'${v}'`).join(", ");
 function record(value, where, required, optional = []) {
-	if (typeof value !== "object" || value === null || Array.isArray(value)) refuse(`${where} must be an object`);
+	if (typeof value !== "object" || value === null || Array.isArray(value)) refuse$1(`${where} must be an object`);
 	const fields = value;
 	const known = /* @__PURE__ */ new Set([...required, ...optional]);
 	const unknown = Object.keys(fields).filter((key) => !known.has(key));
-	if (unknown.length > 0) refuse(`${where} has unknown ${unknown.length === 1 ? "key" : "keys"} ${quoted(unknown)}; it takes ${quoted([...required, ...optional])}`);
+	if (unknown.length > 0) refuse$1(`${where} has unknown ${unknown.length === 1 ? "key" : "keys"} ${quoted(unknown)}; it takes ${quoted([...required, ...optional])}`);
 	const missing = required.filter((key) => fields[key] === void 0);
-	if (missing.length > 0) refuse(`${where} is missing ${quoted(missing)}`);
+	if (missing.length > 0) refuse$1(`${where} is missing ${quoted(missing)}`);
 	return fields;
 }
 function oneOf(value, where, values) {
 	if (typeof value === "string" && values.includes(value)) return value;
-	return refuse(`${where} is ${JSON.stringify(value)}; it must be one of ${quoted(values)}`);
+	return refuse$1(`${where} is ${JSON.stringify(value)}; it must be one of ${quoted(values)}`);
 }
 function names(value, where) {
-	if (!Array.isArray(value) || value.length === 0 || !value.every((item) => typeof item === "string" && item.trim() !== "")) refuse(`${where} must be a non-empty list of non-empty strings`);
+	if (!Array.isArray(value) || value.length === 0 || !value.every((item) => typeof item === "string" && item.trim() !== "")) refuse$1(`${where} must be a non-empty list of non-empty strings`);
 	const list = value;
-	if (new Set(list).size !== list.length) refuse(`${where} lists a name twice`);
+	if (new Set(list).size !== list.length) refuse$1(`${where} lists a name twice`);
 	return Object.freeze([...list].sort());
 }
 function integer(value, where, min) {
-	if (!Number.isSafeInteger(value) || value < min) refuse(`${where} must be an integer >= ${min}`);
+	if (!Number.isSafeInteger(value) || value < min) refuse$1(`${where} must be an integer >= ${min}`);
 	return value;
 }
 /**
@@ -7815,13 +8110,13 @@ function assertSearchSpec(spec) {
 		"evaluate",
 		"stop"
 	];
-	if (typeof spec !== "object" || spec === null || Array.isArray(spec)) refuse("a spec must be an object with the axes state, context, select, workers, comms, evaluate and stop");
+	if (typeof spec !== "object" || spec === null || Array.isArray(spec)) refuse$1("a spec must be an object with the axes state, context, select, workers, comms, evaluate and stop");
 	const top = spec;
 	const unknownAxes = Object.keys(top).filter((key) => !axes.includes(key));
-	if (unknownAxes.length > 0) refuse(`unknown axis ${quoted(unknownAxes)}; the axes are ${quoted(axes)}`);
+	if (unknownAxes.length > 0) refuse$1(`unknown axis ${quoted(unknownAxes)}; the axes are ${quoted(axes)}`);
 	const missingAxes = axes.filter((axis) => top[axis] === void 0);
-	if (missingAxes.length > 0) refuse(`axis ${quoted(missingAxes)} is missing`);
-	if (top.state === "conversation") refuse("state 'conversation' is not a value: research memory that lives only in a harness conversation cannot be checkpointed, inspected or ablated; it is always harness");
+	if (missingAxes.length > 0) refuse$1(`axis ${quoted(missingAxes)} is missing`);
+	if (top.state === "conversation") refuse$1("state 'conversation' is not a value: research memory that lives only in a harness conversation cannot be checkpointed, inspected or ablated; it is always harness");
 	const state = oneOf(top.state, "state", ["harness"]);
 	const context = oneOf(top.context, "context", ["fresh", "native"]);
 	const select = oneOf(top.select, "select", [
@@ -7850,21 +8145,21 @@ function assertSearchSpec(spec) {
 	if (stopIn.plateau !== void 0) {
 		const plateauIn = record(stopIn.plateau, "stop.plateau", ["window", "minDelta"]);
 		const minDelta = plateauIn.minDelta;
-		if (typeof minDelta !== "number" || !Number.isFinite(minDelta) || minDelta < 0) refuse("stop.plateau.minDelta must be a finite number >= 0");
+		if (typeof minDelta !== "number" || !Number.isFinite(minDelta) || minDelta < 0) refuse$1("stop.plateau.minDelta must be a finite number >= 0");
 		plateau = Object.freeze({
 			window: integer(plateauIn.window, "stop.plateau.window", 1),
 			minDelta
 		});
 	}
-	if (select === "advisor" && context === "native") refuse("select 'advisor' sees each epoch only through the coordinator's projection, so it needs context 'fresh'; with 'native' its earlier turns would stay in its context");
-	if (select === "code" && context === "fresh") refuse("select 'code' runs the root in your brain, in process; it has no harness session for context 'fresh' to renew");
-	if (select === "advisor" && count === 0) refuse("select 'advisor' only assigns work, so workers.count must be at least 1");
-	if (count === 0 && comms !== "none") refuse(`workers.count 0 runs the root alone, so comms must be 'none', not '${comms}'`);
-	if (count > 0 && comms === "none") refuse(`comms 'none' leaves ${count} worker(s) with no channel; use 'assignments' or 'messages'`);
-	if (comms === "messages" && count < 2) refuse(`comms 'messages' needs at least two peers to message each other; workers.count is ${count}`);
-	if (select === "self" && comms !== "messages") refuse("select 'self' lets the peers divide the work by messages, so comms must be 'messages'; use select 'fixed' for independent attempts");
-	if (count === 0 && isolation === "shared") refuse("workers.isolation 'shared' places workers in shared boxes, and workers.count is 0");
-	if (count === 0 && models !== void 0) refuse("workers.models lists the models workers may use, and workers.count is 0");
+	if (select === "advisor" && context === "native") refuse$1("select 'advisor' sees each epoch only through the coordinator's projection, so it needs context 'fresh'; with 'native' its earlier turns would stay in its context");
+	if (select === "code" && context === "fresh") refuse$1("select 'code' runs the root in your brain, in process; it has no harness session for context 'fresh' to renew");
+	if (select === "advisor" && count === 0) refuse$1("select 'advisor' only assigns work, so workers.count must be at least 1");
+	if (count === 0 && comms !== "none") refuse$1(`workers.count 0 runs the root alone, so comms must be 'none', not '${comms}'`);
+	if (count > 0 && comms === "none") refuse$1(`comms 'none' leaves ${count} worker(s) with no channel; use 'assignments' or 'messages'`);
+	if (comms === "messages" && count < 2) refuse$1(`comms 'messages' needs at least two peers to message each other; workers.count is ${count}`);
+	if (select === "self" && comms !== "messages") refuse$1("select 'self' lets the peers divide the work by messages, so comms must be 'messages'; use select 'fixed' for independent attempts");
+	if (count === 0 && isolation === "shared") refuse$1("workers.isolation 'shared' places workers in shared boxes, and workers.count is 0");
+	if (count === 0 && models !== void 0) refuse$1("workers.models lists the models workers may use, and workers.count is 0");
 	return Object.freeze({
 		state,
 		context,
@@ -7993,8 +8288,8 @@ function profileTable(entries) {
 	for (const item of entries) {
 		const entry = "profile" in item ? item : { profile: item };
 		const name = entry.profile.name;
-		if (typeof name !== "string" || name.trim() === "") refuse("every profile in inputs.workers needs a name, which the root spawns it by");
-		if (table.has(name)) refuse(`inputs.workers names profile '${name}' twice`);
+		if (typeof name !== "string" || name.trim() === "") refuse$1("every profile in inputs.workers needs a name, which the root spawns it by");
+		if (table.has(name)) refuse$1(`inputs.workers names profile '${name}' twice`);
 		table.set(name, entry);
 	}
 	const listed = Object.freeze([...table.keys()]);
@@ -8008,12 +8303,12 @@ function placedBackend(spec, inputs) {
 	const backend = inputs.options?.backend;
 	const sharedAlready = backend?.backend === "provider" && backend.shared !== void 0;
 	if (spec.workers.isolation === "isolated") {
-		if (inputs.sharedPlacement !== void 0 || sharedAlready) refuse("workers.isolation 'isolated' gives every worker its own environment; drop the shared placement or use isolation 'shared'");
+		if (inputs.sharedPlacement !== void 0 || sharedAlready) refuse$1("workers.isolation 'isolated' gives every worker its own environment; drop the shared placement or use isolation 'shared'");
 		return backend;
 	}
 	if (inputs.sharedPlacement === void 0) return backend;
-	if (backend?.backend !== "provider") refuse(`inputs.sharedPlacement places workers through a 'provider' backend; options.backend is ${backend === void 0 ? "absent" : `'${backend.backend}'`}`);
-	if (sharedAlready) refuse("options.backend already carries a shared placement; pass it once");
+	if (backend?.backend !== "provider") refuse$1(`inputs.sharedPlacement places workers through a 'provider' backend; options.backend is ${backend === void 0 ? "absent" : `'${backend.backend}'`}`);
+	if (sharedAlready) refuse$1("options.backend already carries a shared placement; pass it once");
 	return Object.freeze({
 		...backend,
 		shared: inputs.sharedPlacement
@@ -8042,10 +8337,10 @@ function compileSearchSpec(raw, inputs) {
 	const spec = assertSearchSpec(raw);
 	const digest = searchSpecDigest(spec);
 	const passed = inputs.options ?? {};
-	for (const [key, axis] of Object.entries(ownedBy)) if (passed[key] !== void 0) refuse(`options.${key} is decided by ${axis}; change the spec or that input instead`);
-	if (inputs.deliverable === void 0) refuse("inputs.deliverable is required: a spec run is sent back by its check");
+	for (const [key, axis] of Object.entries(ownedBy)) if (passed[key] !== void 0) refuse$1(`options.${key} is decided by ${axis}; change the spec or that input instead`);
+	if (inputs.deliverable === void 0) refuse$1("inputs.deliverable is required: a spec run is sent back by its check");
 	const correlation = passed.execution?.correlation ?? {};
-	if (Object.hasOwn(correlation, "searchSpecDigest")) refuse(`options.execution.correlation cannot set ${SEARCH_SPEC_CORRELATION_KEY}; Runtime records it`);
+	if (Object.hasOwn(correlation, "searchSpecDigest")) refuse$1(`options.execution.correlation cannot set ${SEARCH_SPEC_CORRELATION_KEY}; Runtime records it`);
 	const execution = Object.freeze({
 		...passed.execution,
 		correlation: Object.freeze({
@@ -8066,9 +8361,9 @@ function compileSearchSpec(raw, inputs) {
 	};
 	const backend = placedBackend(spec, inputs);
 	const callerOwnsLeaves = passed.makeLeafAgent !== void 0 || passed.makeWorkerAgent !== void 0;
-	if (spec.comms === "messages" && backend !== void 0 && backend.backend !== "bridge" && backend.backend !== "provider" && !callerOwnsLeaves) refuse(`comms 'messages' needs workers that can call peer mail: Runtime mounts it on 'bridge' or capable 'provider' workers, and '${backend.backend}' workers run no client for it. Run the workers on a bridge, or mount WorkerSpawnContext.peerMailUrl through makeLeafAgent`);
+	if (spec.comms === "messages" && backend !== void 0 && backend.backend !== "bridge" && backend.backend !== "provider" && !callerOwnsLeaves) refuse$1(`comms 'messages' needs workers that can call peer mail: Runtime mounts it on 'bridge' or capable 'provider' workers, and '${backend.backend}' workers run no client for it. Run the workers on a bridge, or mount WorkerSpawnContext.peerMailUrl through makeLeafAgent`);
 	const analystKinds = spec.evaluate.analysts ?? [];
-	if (analystKinds.length > 0 && inputs.analysts === void 0) refuse("evaluate.analysts names analyst kinds, and inputs.analysts holds no registry to run them");
+	if (analystKinds.length > 0 && inputs.analysts === void 0) refuse$1("evaluate.analysts names analyst kinds, and inputs.analysts holds no registry to run them");
 	const axisOptions = {
 		continuation,
 		execution,
@@ -8079,15 +8374,15 @@ function compileSearchSpec(raw, inputs) {
 		...backend === void 0 ? {} : { backend }
 	};
 	if (spec.select === "code" || spec.select === "fixed") {
-		const graph = inputs.graph ?? refuse(`select '${spec.select}' needs inputs.graph`);
-		if (inputs.profile !== void 0 || inputs.task !== void 0) refuse(`select '${spec.select}' runs inputs.graph, whose root is its own node and whose task is the deliverable's description; drop inputs.profile and inputs.task`);
-		if (inputs.workers !== void 0) refuse(`select '${spec.select}' spawns the graph's nodes; drop inputs.workers`);
-		if (analystKinds.length > 0) refuse(`select '${spec.select}' declares a graph's analysts as analyzes edges, not evaluate.analysts`);
-		if (spec.workers.count === 0) refuse(`select '${spec.select}' runs a graph's worker nodes, so workers.count must be at least 1`);
-		if (spec.select === "code" && inputs.brain === void 0) refuse("select 'code' needs inputs.brain, the caller's brain that drives the root");
-		if (spec.select === "fixed" && inputs.brain !== void 0) refuse("select 'fixed' runs the graph's root profile; a brain is select 'code'");
-		if (passed.registry !== void 0) refuse("options.registry is supervise's name table, which a graph cannot read; pass the graph's directive registry as inputs.directives");
-		if (spec.context === "fresh" && !harnessRunsAgent(graphRoot(graph)?.harness)) refuse("context 'fresh' renews an external harness root's session at each re-entry, and the graph's root runs on the router brain");
+		const graph = inputs.graph ?? refuse$1(`select '${spec.select}' needs inputs.graph`);
+		if (inputs.profile !== void 0 || inputs.task !== void 0) refuse$1(`select '${spec.select}' runs inputs.graph, whose root is its own node and whose task is the deliverable's description; drop inputs.profile and inputs.task`);
+		if (inputs.workers !== void 0) refuse$1(`select '${spec.select}' spawns the graph's nodes; drop inputs.workers`);
+		if (analystKinds.length > 0) refuse$1(`select '${spec.select}' declares a graph's analysts as analyzes edges, not evaluate.analysts`);
+		if (spec.workers.count === 0) refuse$1(`select '${spec.select}' runs a graph's worker nodes, so workers.count must be at least 1`);
+		if (spec.select === "code" && inputs.brain === void 0) refuse$1("select 'code' needs inputs.brain, the caller's brain that drives the root");
+		if (spec.select === "fixed" && inputs.brain !== void 0) refuse$1("select 'fixed' runs the graph's root profile; a brain is select 'code'");
+		if (passed.registry !== void 0) refuse$1("options.registry is supervise's name table, which a graph cannot read; pass the graph's directive registry as inputs.directives");
+		if (spec.context === "fresh" && !harnessRunsAgent(graphRoot(graph)?.harness)) refuse$1("context 'fresh' renews an external harness root's session at each re-entry, and the graph's root runs on the router brain");
 		return Object.freeze({
 			call: "runGraph",
 			spec,
@@ -8107,14 +8402,14 @@ function compileSearchSpec(raw, inputs) {
 			})
 		});
 	}
-	const profile = inputs.profile ?? refuse(`select '${spec.select}' needs inputs.profile, the root`);
-	if (inputs.task === void 0) refuse(`select '${spec.select}' needs inputs.task`);
-	if (inputs.graph !== void 0 || inputs.brain !== void 0 || inputs.directives !== void 0) refuse(`select '${spec.select}' runs inputs.profile; a graph, brain or directives is select 'code' or 'fixed'`);
-	if (!harnessRunsAgent(profile.harness)) refuse(`select '${spec.select}' runs the root under Runtime's continuation (context, evaluate and stop), which drives an external harness; profile '${profile.name}' runs on the router brain. Give it a harness such as claude-code or codex, or use select 'code'`);
-	if (spec.workers.count === 0 && grantsSpawn(profile)) refuse(`workers.count 0 runs the root alone, but profile '${profile.name}' grants ${SPAWN_GRANT}`);
-	if (spec.workers.count > 0 && !grantsSpawn(profile)) refuse(`workers.count ${spec.workers.count} needs a root that spawns, and profile '${profile.name}' does not grant ${SPAWN_GRANT}`);
-	if (spec.select === "self" && inputs.workers?.length !== spec.workers.count) refuse(`select 'self' starts exactly workers.count peers; inputs.workers holds ${inputs.workers?.length ?? 0}, and workers.count is ${spec.workers.count}`);
-	if (inputs.workers !== void 0 && passed.registry?.profiles !== void 0) refuse("inputs.workers and options.registry.profiles both name spawnable profiles; pass them once");
+	const profile = inputs.profile ?? refuse$1(`select '${spec.select}' needs inputs.profile, the root`);
+	if (inputs.task === void 0) refuse$1(`select '${spec.select}' needs inputs.task`);
+	if (inputs.graph !== void 0 || inputs.brain !== void 0 || inputs.directives !== void 0) refuse$1(`select '${spec.select}' runs inputs.profile; a graph, brain or directives is select 'code' or 'fixed'`);
+	if (!harnessRunsAgent(profile.harness)) refuse$1(`select '${spec.select}' runs the root under Runtime's continuation (context, evaluate and stop), which drives an external harness; profile '${profile.name}' runs on the router brain. Give it a harness such as claude-code or codex, or use select 'code'`);
+	if (spec.workers.count === 0 && grantsSpawn(profile)) refuse$1(`workers.count 0 runs the root alone, but profile '${profile.name}' grants ${SPAWN_GRANT}`);
+	if (spec.workers.count > 0 && !grantsSpawn(profile)) refuse$1(`workers.count ${spec.workers.count} needs a root that spawns, and profile '${profile.name}' does not grant ${SPAWN_GRANT}`);
+	if (spec.select === "self" && inputs.workers?.length !== spec.workers.count) refuse$1(`select 'self' starts exactly workers.count peers; inputs.workers holds ${inputs.workers?.length ?? 0}, and workers.count is ${spec.workers.count}`);
+	if (inputs.workers !== void 0 && passed.registry?.profiles !== void 0) refuse$1("inputs.workers and options.registry.profiles both name spawnable profiles; pass them once");
 	const registry = inputs.workers === void 0 ? passed.registry : Object.freeze({
 		...passed.registry,
 		profiles: profileTable(inputs.workers)
@@ -8140,8 +8435,7 @@ function compileSearchSpec(raw, inputs) {
 		})
 	});
 }
-//#endregion
-//#region src/runtime/supervise/sql-run-context.ts
+// src/runtime/supervise/sql-run-context.ts
 /**
 * A cross-machine run context on the existing autocommit SqlAdapter. Reuse the same database,
 * tablePrefix and runId on every host; no runDir or shared filesystem is required.
@@ -8314,8 +8608,158 @@ async function projection(entries) {
 		}
 	};
 }
-//#endregion
-//#region src/runtime/supervise/trajectory-recorder.ts
+// src/runtime/supervise/stored-graph-validation.ts
+const name = z.string().min(1);
+const positiveInteger = z.number().int().positive();
+const directive = z.strictObject({
+	surface: name,
+	version: z.number().int().nonnegative()
+});
+const node = z.strictObject({
+	id: name,
+	profile: agentProfileSchema
+});
+const entry = z.array(z.strictObject({
+	node: name,
+	task: z.unknown().refine((value) => value !== void 0, "task must be explicit JSON data")
+})).min(1);
+const gates = z.array(z.strictObject({
+	id: name,
+	question: name,
+	choices: z.array(name).min(1)
+}));
+const continuity = z.enum(["fresh", "resume"]).optional();
+const topology = z.lazy(() => z.strictObject({
+	nodes: z.array(node).min(1),
+	edges: z.array(edge),
+	entry: entry.optional(),
+	gates: gates.optional()
+}));
+const edge = z.lazy(() => z.discriminatedUnion("kind", [
+	z.strictObject({
+		kind: z.literal("delegates"),
+		from: name,
+		to: name,
+		directive,
+		maxTraversals: positiveInteger.optional(),
+		continuity
+	}),
+	z.strictObject({
+		kind: z.literal("analyzes"),
+		analyst: name,
+		over: z.array(name).min(1),
+		to: name,
+		directive,
+		maxTraversals: positiveInteger.optional()
+	}),
+	z.strictObject({
+		kind: z.literal("maps"),
+		from: name,
+		pointer: z.string(),
+		to: name.optional(),
+		graph: topology.optional(),
+		join: name,
+		directive,
+		maxItems: positiveInteger,
+		concurrency: positiveInteger,
+		onItemFailure: z.enum(["all-or-refuse", "settled-subset"]),
+		itemBudget: graphFileSchema.shape.budget.partial().optional()
+	}),
+	z.strictObject({
+		kind: z.literal("routes"),
+		from: z.union([name, z.array(name).min(2)]),
+		to: z.union([
+			name,
+			z.array(name).min(2),
+			z.strictObject({ stop: name }),
+			z.strictObject({ finish: name })
+		]),
+		directive,
+		when: graphRouteWhenSchema.optional(),
+		evidence: z.array(name).optional(),
+		maxTraversals: positiveInteger.optional(),
+		continuity
+	})
+]));
+const storedGraphSchema = graphFileSchema.pick({
+	digest: true,
+	budget: true,
+	deliverable: true
+}).required().extend({
+	observed: z.literal(false).optional(),
+	triggerBindings: graphTriggerBindingsSchema.optional(),
+	nodes: z.array(node).min(1),
+	edges: z.array(edge),
+	entry: entry.optional(),
+	gates: gates.optional()
+});
+function refuse(message) {
+	throw new ValidationError(`validateStoredGraph: ${message}`);
+}
+/** Inspect descriptors instead of invoking accessors; JSON has no getters, symbols, prototypes,
+* sparse arrays, undefined, closures or cycles. Repeated non-cyclic references remain JSON data. */
+function assertJsonData(value, visiting = /* @__PURE__ */ new Set()) {
+	if (value === null || typeof value === "string" || typeof value === "boolean") return;
+	if (typeof value === "number" && Number.isFinite(value)) return;
+	if (!value || typeof value !== "object" || visiting.has(value)) refuse("expected finite, acyclic JSON data without executable values");
+	const array = Array.isArray(value);
+	const prototype = Object.getPrototypeOf(value);
+	if (array ? prototype !== Array.prototype : prototype !== Object.prototype && prototype !== null) refuse("expected plain JSON objects and arrays");
+	visiting.add(value);
+	const descriptors = Object.getOwnPropertyDescriptors(value);
+	const keys = Reflect.ownKeys(descriptors);
+	if (array && keys.length !== value.length + 1) refuse("sparse arrays are not canonical JSON");
+	for (const key of keys) {
+		if (array && key === "length") continue;
+		const property = typeof key === "string" ? descriptors[key] : void 0;
+		if (!property || !property.enumerable || !("value" in property)) refuse("JSON data cannot contain symbols, hidden properties or accessors");
+		if (array && (!/^(0|[1-9]\d*)$/.test(key) || Number(key) >= value.length)) refuse("arrays may contain only indexed JSON values");
+		assertJsonData(property.value, visiting);
+	}
+	visiting.delete(value);
+}
+function assertExecutableNodes(graph) {
+	for (const item of graph.nodes) assertExecutableAgentProfile(item.profile, `validateStoredGraph node ${item.id}`);
+	for (const item of graph.edges) if (item.kind === "maps" && item.graph) assertExecutableNodes(item.graph);
+}
+/** Validate compiled, runnable StoredGraph data. Authored params/seats/on envelopes belong to
+* loadGraphFile; observations belong to the registry's observation importer, never this entry.
+* No check function or model call is executed while validating environment-owned references. */
+function validateStoredGraph(value, options = {}) {
+	assertJsonData(value);
+	const parsed = storedGraphSchema.safeParse(value);
+	if (!parsed.success) refuse(parsed.error.message);
+	const graph = parsed.data;
+	if (graph.triggerBindings !== void 0) assertGraphTriggerBindings(graph, graph.triggerBindings);
+	const check = graph.deliverable;
+	if (check.checkRef === "command") {
+		if (!check.command?.command.trim() || check.when) refuse("command check requires only command data");
+	} else if (check.checkRef === "route") {
+		if (!check.when || check.command) refuse("route check requires only when data");
+	} else {
+		if (check.command || check.when) refuse("custom checkRef cannot carry builtin command/route data");
+		const selected = options.checks && Object.hasOwn(options.checks, check.checkRef) ? options.checks[check.checkRef] : void 0;
+		if (selected === void 0) refuse(`unknown checkRef ${check.checkRef}; supply an environment checks binding`);
+		if (typeof selected !== "function") {
+			const command = graphFileSchema.shape.deliverable.unwrap().shape.command.unwrap().safeParse(selected);
+			if (!command.success || !command.data.command.trim()) refuse(`invalid checks binding ${check.checkRef}`);
+		}
+	}
+	if (check.when) {
+		const ids = new Set(graph.nodes.map((item) => item.id));
+		for (const condition of "all" in check.when ? check.when.all : [check.when]) if (condition.node !== void 0 && !ids.has(condition.node)) refuse(`check references unknown node ${condition.node}`);
+	}
+	assertExecutableNodes(graph);
+	const registry = options.registry ?? kernelPromptRegistry();
+	if (graph.entry) validateFlowGraph(graph, registry, options.analysts);
+	else validateGraphTopology(graph.nodes, graph.edges, registry, options.analysts);
+	const { digest: provided, ...rawContent } = value;
+	if (graphDigest(rawContent) !== provided) refuse("supplied digest does not match the input graph");
+	const { digest, ...content } = graph;
+	if (graphDigest(content) !== digest) refuse("supplied digest does not match the canonical graph");
+	return detachedSnapshot(graph, "validated stored graph");
+}
+// src/runtime/supervise/trajectory-recorder.ts
 /**
 *
 * The SETTLE-time analyst: when a worker finishes, collect its tool spans from a `TraceSource` and run
@@ -8376,8 +8820,7 @@ async function analyzeTrace(source, runId = "worker") {
 		toolWaste
 	};
 }
-//#endregion
-//#region src/runtime/supervise/untracked-clone.ts
+// src/runtime/supervise/untracked-clone.ts
 /**
 * Worker-clone preparation: make each worker's fresh clone a FAITHFUL copy of the
 * shared workspace's working tree, not just of its git history.
@@ -8420,7 +8863,7 @@ const SKIPPED_TOP_LEVEL = /* @__PURE__ */ new Set([
 	".claude"
 ]);
 /** Warn (and copy anyway) past this untracked payload size. */
-const DEFAULT_WARN_BYTES = 2 * 1024 * 1024 * 1024;
+const DEFAULT_WARN_BYTES = 2147483648;
 /**
 * Copy every untracked file of `sourceDir`'s working tree — including git-ignored
 * build outputs (`git ls-files --others` with NO exclude flags lists both) — into
@@ -8441,7 +8884,7 @@ function copyUntrackedIntoClone(sourceDir, cloneDir, opts = {}) {
 		"-z"
 	], {
 		encoding: "utf8",
-		maxBuffer: 256 * 1024 * 1024
+		maxBuffer: 268435456
 	});
 	if (ls.status !== 0) throw new Error(`git ls-files --others failed in ${src}: ${(ls.stderr ?? "").trim() || `exit ${ls.status}`}`);
 	const plan = [];
@@ -8527,8 +8970,7 @@ function withUntrackedArtifacts(ws, sourceDir, log) {
 		head: () => ws.head()
 	};
 }
-//#endregion
-//#region src/runtime/supervise/worker-evidence.ts
+// src/runtime/supervise/worker-evidence.ts
 /**
 * Evidence-rich worker settlement.
 *
@@ -8603,8 +9045,7 @@ function diffSummary(patch) {
 	const omitted = lines.length - head.length;
 	return `${`--- diff: ${filesChanged} file(s) changed, ${Buffer.byteLength(patch)} bytes; first ${head.length} line(s) ---`}\n${head.join("\n")}${omitted > 0 ? `\n... (${omitted} more patch lines; full patch persisted per worker)` : ""}`;
 }
-//#endregion
-//#region src/runtime/supervise/patch-checks.ts
+// src/runtime/supervise/patch-checks.ts
 const DEFAULT_MAX_DIFF_LINES = 400;
 /**
 * Default-on credential-path floor: a patch that touches a credential-shaped path is rejected
@@ -8696,8 +9137,7 @@ function runCoderChecks(input, constraints = {}) {
 	if (notes.length > 0) verdict.notes = notes.join("; ");
 	return verdict;
 }
-//#endregion
-//#region src/runtime/supervise/patch-deliverable.ts
+// src/runtime/supervise/patch-deliverable.ts
 /**
 * Build the `DeliverableSpec<WorktreePatchArtifact>`: `check(artifact)` runs the shared mechanical
 * gate (`runCoderChecks`) over the captured patch + the worktree-derived pass signals and returns
@@ -8732,8 +9172,7 @@ function signalPass(value, required) {
 	if (value !== void 0) return value;
 	return !required;
 }
-//#endregion
-//#region src/runtime/supervise/worktree-fanout.ts
+// src/runtime/supervise/worktree-fanout.ts
 /**
 * Build the worktree fanout combinator. Run it with `runPersonified({ persona, shape, task, budget })`
 * — equal-k holds by construction (the conserved budget pool bounds the N leaves), and selection is
@@ -8785,8 +9224,7 @@ function worktreeFanout(options) {
 		selectWinner
 	});
 }
-//#endregion
-//#region src/runtime/supervise-analysts.ts
+// src/runtime/supervise-analysts.ts
 /**
 * Analyst lenses a supervised manager reads: the agent-eval trace-analyst registry adapted to the
 * `analysts` option (`analystsFromRegistry`), and `failuresAnalyst`, which reports the tests still
@@ -8973,8 +9411,7 @@ function allTestsPassed(report) {
 function missingRunTestsEvidence() {
 	return { summary: "Missing structured run_tests span evidence. Refusing to infer failing-test names from worker prose." };
 }
-//#endregion
-//#region src/runtime/surface-diff.ts
+// src/runtime/surface-diff.ts
 /**
 *
 * Settle-time surface-diff harvest — the read-back dual of the mount manifest.
@@ -9171,8 +9608,7 @@ function fsSurfaceReader(root) {
 		}
 	};
 }
-//#endregion
-//#region src/runtime/verifier-environment.ts
+// src/runtime/verifier-environment.ts
 const submitTool = {
 	type: "function",
 	function: {
@@ -9250,8 +9686,7 @@ function createVerifierEnvironment(opts) {
 		}
 	};
 }
-//#endregion
-//#region src/runtime/waterfall.ts
+// src/runtime/waterfall.ts
 /** Build a `WaterfallCollector` that records agent spans and renders them as an ASCII timeline. */
 function createWaterfallCollector() {
 	let spans = /* @__PURE__ */ new Map();
@@ -9370,8 +9805,7 @@ function createWaterfallCollector() {
 		}
 	};
 }
-//#endregion
-//#region src/runtime/workspace.ts
+// src/runtime/workspace.ts
 /** Host-process `Shell`: run a command via `execFile`, resolving `{ stdout, stderr, code }` (never throws on non-zero exit). */
 function localShell() {
 	return async (args, cwd) => {
@@ -9381,7 +9815,7 @@ function localShell() {
 			execFile(bin ?? "", rest, {
 				cwd,
 				encoding: "utf-8",
-				maxBuffer: 64 * 1024 * 1024
+				maxBuffer: 67108864
 			}, (err, stdout, stderr) => {
 				resolve({
 					stdout: stdout ?? "",
@@ -9590,7 +10024,6 @@ async function runInWorkspace(ws, body, opts = {}) {
 function tail(s) {
 	return s.slice(-400);
 }
-//#endregion
-export { definePersona as $, SqlRunOwnershipError as $t, searchSpecDigest as A, resolveSecretEnv as At, chatTransportExecutor as B, declaredCheckJudge as Bt, withUntrackedArtifacts as C, connectStdioMcp as Ct, assertSearchSpec as D, envKeyProvider as Dt, SEARCH_SPEC_CORRELATION_KEY as E, sanitizeMcpToolSchema as Et, profileRegistry as F, superviseDispatch as Ft, SandboxRunAbortError as G, sentinelCompletion as Gt, createChatSessionStore as H, runIsolatedCheck as Ht, profileRunsForName as I, assertDeclaredCheck as It, printBenchmarkReport as J, pairwiseSignificance as Jt, openSandboxRun as K, stopSentinel as Kt, recordProfileRun as L, checkProgramDigest as Lt, bestProfileFor as M, inlineSandboxClient as Mt, loadProfile as N, loopCampaignDispatch as Nt, compileSearchSpec as O, mcpSecretEnvMetadataKey as Ot, pickBestProfile as P, loopDispatch as Pt, trajectoryReport as Q, renderPairwiseMarkdown as Qt, graphFromSessionFacts as R, declaredCheckDeliverable as Rt, copyUntrackedIntoClone as S, McpSpawnFault as St, createFencedSqlRunContext as T, createMcpEnvironment as Tt, runStrategyEvolution as U, completionAuthorizes as Ut, chatWorkerSeam as V, readDeclaredCheck as Vt, strategyTournament as W, deterministicCompletion as Wt, createPrivateCasArtifactPort as X, renderLeaderboardMarkdown as Xt, runBenchmark as Y, renderLeaderboardHtml as Yt, equalKOnCost as Z, renderLeaderboardSvg as Zt, NOTE_MAX_CHARS as _, inProcessSandboxClient as _t, localShell as a, flatWidenGate as at, composeWorkerEvidence as b, defineLeaderboard as bt, createVerifierEnvironment as c, pipeline as ct, harvestSurfaceDiffs as d, widen as dt, openSqlRunStore as en, runPersonified as et, analystsFromRegistry as f, assertTraceDerivedFindings as ft, EVIDENCE_MAX_CHARS as g, observationFromRegistry as gt, runCoderChecks as h, registryScopeAnalyst as ht, jjWorkspace as i, fanout as it, connectRemoteSupervisor as j, secretEnvOfMcpServer as jt, searchPresets as k, resolveMcpServerLaunch as kt, boxSurfaceReader as l, selectValidWinner as lt, worktreeFanout as m, createScopeAnalyst as mt, makeFinding$1 as n, InMemoryCorpus as nt, runInWorkspace as o, loopUntil as ot, failuresAnalyst as p, buildSteerContext as pt, createS3PrivateCasStore as q, leaderboard as qt, gitWorkspace as r, renderCorpusToInstructions as rt, createWaterfallCollector as s, panel as st, computeFindingId$1 as t, FileCorpus as tt, fsSurfaceReader as u, verify as ut, VERIFY_TAIL_CHARS as v, HarvestError as vt, analyzeTrace as w, materializeLocalMcp as wt, settledWorkerOut as x, resolveSandboxClient as xt, closingWorkerNote as y, harvestCorpus as yt, graphDesignerExtraTools as z, declaredCheckDigest as zt };
+export { runBenchmark as $, renderLeaderboardHtml as $t, searchPresets as A, sanitizeMcpToolSchema as At, graphFromSessionFacts as B, assertDeclaredCheck as Bt, withUntrackedArtifacts as C, harvestCorpus as Ct, SEARCH_SPEC_CORRELATION_KEY as D, connectStdioMcp as Dt, createFencedSqlRunContext as E, McpSpawnFault as Et, loadProfile as F, secretEnvOfMcpServer as Ft, chatWorkerSeam as G, readDeclaredCheck as Gt, loadGraphFile as H, declaredCheckDeliverable as Ht, pickBestProfile as I, inlineSandboxClient as It, strategyTournament as J, deterministicCompletion as Jt, createChatSessionStore as K, runIsolatedCheck as Kt, profileRegistry as L, loopCampaignDispatch as Lt, connectRemoteSupervisor as M, mcpSecretEnvMetadataKey as Mt, connectRemoteSupervisorControl as N, resolveMcpServerLaunch as Nt, assertSearchSpec as O, materializeLocalMcp as Ot, bestProfileFor as P, resolveSecretEnv as Pt, printBenchmarkReport as Q, pairwiseSignificance as Qt, profileRunsForName as R, loopDispatch as Rt, copyUntrackedIntoClone as S, HarvestError as St, validateStoredGraph as T, resolveSandboxClient as Tt, graphDesignerExtraTools as U, declaredCheckDigest as Ut, GraphFileResolutionError as V, checkProgramDigest as Vt, chatTransportExecutor as W, declaredCheckJudge as Wt, openSandboxRun as X, stopSentinel as Xt, SandboxRunAbortError as Y, sentinelCompletion as Yt, createS3PrivateCasStore as Z, leaderboard as Zt, NOTE_MAX_CHARS as _, buildSteerContext as _t, localShell as a, FileCorpus as at, composeWorkerEvidence as b, observationFromRegistry as bt, createVerifierEnvironment as c, fanout as ct, harvestSurfaceDiffs as d, panel as dt, renderLeaderboardMarkdown as en, createPrivateCasArtifactPort as et, analystsFromRegistry as f, pipeline as ft, EVIDENCE_MAX_CHARS as g, assertTraceDerivedFindings as gt, runCoderChecks as h, widen as ht, jjWorkspace as i, openSqlRunStore as in, runPersonified as it, searchSpecDigest as j, envKeyProvider as jt, compileSearchSpec as k, createMcpEnvironment as kt, boxSurfaceReader as l, flatWidenGate as lt, worktreeFanout as m, verify as mt, makeFinding$1 as n, renderPairwiseMarkdown as nn, trajectoryReport as nt, runInWorkspace as o, InMemoryCorpus as ot, failuresAnalyst as p, selectValidWinner as pt, runStrategyEvolution as q, completionAuthorizes as qt, gitWorkspace as r, SqlRunOwnershipError as rn, definePersona as rt, createWaterfallCollector as s, renderCorpusToInstructions as st, computeFindingId$1 as t, renderLeaderboardSvg as tn, equalKOnCost as tt, fsSurfaceReader as u, loopUntil as ut, VERIFY_TAIL_CHARS as v, createScopeAnalyst as vt, analyzeTrace as w, defineLeaderboard as wt, settledWorkerOut as x, inProcessSandboxClient as xt, closingWorkerNote as y, registryScopeAnalyst as yt, recordProfileRun as z, superviseDispatch as zt };
 
-//# sourceMappingURL=runtime-CsvGCQpl.js.map
+//# sourceMappingURL=runtime-6Ec9sHRe.js.map