@tangle-network/agent-runtime 0.349.0 → 0.352.1

package/dist/{supervise-BGfm2GlY.js → supervise-CNNhX0ab.js}

@@ -1,15 +1,16 @@
-import { c as captureRunWriteContext, l as fenceRunWrite, m as __exportAll, p as sha256, r as assertNoSymlinkDescendant, s as writeAtomicDurableFile } from "./record-events-D93DkpAx.js";
-import { $n as HarnessTurnFailedError, $r as sandboxProfileMaterialization, A as beginScopeOwnerAttempt, Ai as cappedDoublingMs, An as toOtelAttributes, At as createExecutor, B as assertRecursiveReservationPolicy, Bi as executorFailure, Bn as PEER_MAIL_WIRE_KEY, Cr as bridgeAdmissionRefusal, Ct as readCommittedJsonLines, Di as RetainedExecutionPendingError, En as generateSpanId, F as coordinationMcpAlias, Fn as INBOX_RECEIPT_KEY, G as meterRuntimeOwnedAccounting, Gr as controlProfileMaterialization, Ht as codeModeArguments, I as coordinationProfileToolPrefix, In as createInbox, Ir as bridgeRuntimeAttachmentsKey, J as recordScopeOwnerDriverAttempt, Jn as createActivityLog, Jr as profileMaterializationAxes$1, Jt as routerBrain, K as meterRuntimeOwnedProviderAttempt, Ki as spendFromUsageTotals, Kr as defineProfileMaterializationContract, Kt as toolResultText, L as providerVisibleProfile, Lr as bridgeStopSignalKey, M as recordScopeOwnerMaterialization, Mi as unavailablePauseMs, Mr as RunCancellationReason, N as restoreScopeOwnerAcceptedExecution, Ni as unavailableResumeAt, Nr as linkAbort, Oi as registerRetainedExecutorPreparation, Ot as bindReusableExecutorExecutionId, P as scopeOwnerExecutorNodeContext, Pr as runAbortable, Qn as DriverAttemptsExhaustedError, R as runtimeGraphMetadataKey, Ri as detachedSnapshot, St as readCommittedJsonFile, Tt as withJsonlFileLock, Ui as meterUsageEvent, Un as isPeerMailEnvelope, Ur as assertProfileMaterialization, Ut as codeModeModelOutput, V as deriveNodeExecutionIdentity, Vi as errMessage, Wi as newUsageTotals, Wt as createCodeModeTools, X as prepareScopeRetainedOwnerSeatSwitch, Xn as isLiveNodeStatus, Xr as promptModelProfileMaterialization, Xt as resolveAgentEnvironmentProvider, Y as recordScopeOwnerPause, Yr as promptControlProfileMaterialization, Z as scopeRetainedOwnerResourceReader, Zn as isTerminalNodeStatus, Zr as renderUnsupported, _i as runtimeOwnedPendingExecutorMaterialization, _n as WORKER_TRACE_PROPAGATION, _r as admitContinuationPolicy, a as assertRunParking, ar as upstreamUnavailableSignal, at as beginScopeRetainedOwnerDrive, br as createContinuationKeeper, bt as isNoEntError, c as sleepScopeWait, cr as authoredSeatStages, ct as scopeRetainedOwnerRestorePoint, d as runFinalizer, di as providerAttemptEvidence, dr as CheckUnavailableError, dt as bindScopeRetainedOwnerProvider, ei as unsupportedProfileDimensions, er as abandonablePending, et as abandonScopeRetainedOwnerInvocation, f as runTree, fi as recordRuntimeOwnedDriveHarnessProviderEvidence, fr as gateFactoryOnDeliverable, ft as scopeRetainedOwnerContext, g as isDriverSpec, gi as runtimeOwnedExecutorProviderEvidence, gr as CONTINUATIONS_DIR, h as driverExecutorFactory, hi as runtimeOwnedExecutorMaterialization, i as RunParkedError, ii as authoredAgentIdentity, ir as undispatchedCredentialExit, it as scopeRetainedOwnerResult, j as noteScopeOwnerPlannedExecution, ji as jitteredMs, jt as snapshotExecutorConfig, ki as retainedExecutorSeamKey, kt as captureReusableExecutorConfig, l as withRunParking, ln as persistHarnessTranscript, lr as seatExecutionProfile, lt as noteScopeRetainedOwnerCoordination, m as driverChild, mi as runtimeOwnedExecutorExecutionBinding, n as createSupervisor, nr as classifyDriverFailure, nt as prepareScopeRetainedOwnerTask, o as bindScopeParkingDrain, or as SeatChain, ot as scopeRetainedOwnerTurnEnded, p as createRootHandle, pi as runtimeOwnedDriveHarnessProviderEvidence, pt as scopeRetainedOwnerJournalRoot, q as recordScopeOwnerBarrenPause, qi as assertValidBudget, qr as fullProfileMaterialization, qt as createRouterTranscript, ri as attestRuntimeOwnedScopeOwner, rr as summarizeDriverAttempts, rt as scopeRetainedOwnerPriorSpend, si as inheritRuntimeOwnedExecutorAttestation, sr as SeatChainExhaustedError, st as reconcileScopeRetainedOwnerEnvironment, ti as worktreeCliProfileMaterialization, tr as causedByPartialFailure, tt as consumeScopeRetainedOwnerResult, u as bestDelivered, un as readHarnessTranscript, ut as bindScopeRetainedOwnerEnvironmentId, vi as runtimeOwnedScopeOwnerRuntime, vr as bestComposite, wn as createOtelExporter, wr as bridgeModelRouteRefusal, wt as upsertCommittedJsonLine, x as parseWorkerToolTraceArtifact, xt as prepareJsonlAppend, yr as checkVerdictOf, zi as contentAddress } from "./supervisor-wS9Ehz_x.js";
-import { f as RuntimeRunStateError, i as ConfigError, m as ValidationError } from "./errors-DodWX-cb.js";
-import { Et as isDeadlineAbortReason, K as chargedTokens, Ot as teardownExecutor, W as addSpend, X as errorMessage, _t as withBudgetResources, dt as withTimeout, et as isAsyncIterable, ft as zeroSpend, gt as resourceTelemetry, kt as teardownSurfaces, mt as addResourceSpend, nt as promptCacheTokenClasses, ot as sleep, ut as unmeteredSpend, xt as DEFAULT_SUCCESSFUL_SHUTDOWN_MS } from "./sandbox-profile-compat-DtuJWFrM.js";
-import { _ as agentHarness, a as concreteProfileModel, c as profileModelExecutionSettings, l as profileProviderModel, n as assertModelAllowed, o as enforceTokenLimits, r as assertProfileModelsAllowed, s as profileBridgeWireModel, t as assertExecutableAgentProfile, v as harnessRunsAgent } from "./model-policy-CyCUwHed.js";
-import { t as composeRuntimeHooks } from "./runtime-hooks-tXpAarhW.js";
-import { c as budgetOverspendText, d as safeJsonText, f as createFileRunContext, l as normalizeAnalyzeOnSettle, m as withRunContext, n as createCoordinationToolsForManager, o as createCancelAcknowledger, p as createInMemoryRunContext, s as createSteerAcknowledger, t as createCoordinationTools, u as coordinationVerbNames } from "./coordination-manager-B2Z_MmL9.js";
-import { c as writeRunCancellation, i as readRunCancellation, r as readRunCancelRequest, s as watchRunCancellation, t as applyRunCancellation } from "./run-cancellation-CzFhQGMa.js";
-import { n as createStdioToolServer, t as PROTOCOL_VERSION } from "./tool-server-XV4aJwoQ.js";
+import { G as cappedDoublingMs, J as unavailableResumeAt, K as jitteredMs, P as RetainedExecutionPendingError, St as newUsageTotals, T as sha256, Tt as assertValidBudget, V as retainedExecutorSeamKey, Xt as __exportAll, a as isNoEntError, at as executorFailure, b as captureRunWriteContext, c as readCommittedJsonLines, ft as errMessage, g as assertNoSymlinkDescendant, l as upsertCommittedJsonLine, o as prepareJsonlAppend, q as unavailablePauseMs, rt as contentAddress, s as readCommittedJsonFile, tt as detachedSnapshot, u as withJsonlFileLock, wt as spendFromUsageTotals, x as fenceRunWrite, xt as meterUsageEvent, y as writeAtomicDurableFile, z as registerRetainedExecutorPreparation } from "./journal-store-BJPMUydp.js";
+import { $ as abandonScopeRetainedOwnerInvocation, $n as authoredSeatStages, $r as inheritRuntimeOwnedExecutorAttestation, A as noteScopeOwnerPlannedExecution, B as deriveNodeExecutionIdentity, Br as profileMaterializationAxes$1, Cr as RunCancellationReason, Dn as createInbox, Dr as bridgeRuntimeAttachmentsKey, En as INBOX_RECEIPT_KEY, F as coordinationProfileToolPrefix, Fr as assertProfileMaterialization, Ft as createCodeModeTools, G as meterRuntimeOwnedProviderAttempt, Gn as abandonablePending, Gr as sandboxProfileMaterialization, Hn as isTerminalNodeStatus, Hr as promptModelProfileMaterialization, I as providerVisibleProfile, J as recordScopeOwnerPause, Jn as summarizeDriverAttempts, K as recordScopeOwnerBarrenPause, Kn as causedByPartialFailure, Kr as unsupportedProfileDimensions, L as runtimeGraphMetadataKey, Lr as controlProfileMaterialization, Lt as toolResultText, M as restoreScopeOwnerAcceptedExecution, N as scopeOwnerExecutorNodeContext, Nt as codeModeArguments, Or as bridgeStopSignalKey, P as coordinationMcpAlias, Pn as isPeerMailEnvelope, Pt as codeModeModelOutput, Qn as SeatChainExhaustedError, Rr as defineProfileMaterializationContract, Rt as createRouterTranscript, St as snapshotExecutorConfig, Tr as runAbortable, Un as DriverAttemptsExhaustedError, Ur as renderUnsupported, Vn as isLiveNodeStatus, Vr as promptControlProfileMaterialization, Vt as resolveAgentEnvironmentProvider, W as meterRuntimeOwnedAccounting, Wn as HarnessTurnFailedError, X as scopeRetainedOwnerResourceReader, Xn as upstreamUnavailableSignal, Xr as authoredAgentIdentity, Y as prepareScopeRetainedOwnerSeatSwitch, Yn as undispatchedCredentialExit, Yr as attestRuntimeOwnedScopeOwner, Zn as SeatChain, _n as generateSpanId, a as assertRunParking, ai as runtimeOwnedDriveHarnessProviderEvidence, at as scopeRetainedOwnerTurnEnded, bt as captureReusableExecutorConfig, c as sleepScopeWait, ci as runtimeOwnedExecutorProviderEvidence, cn as WORKER_TRACE_PROPAGATION, cr as admitContinuationPolicy, ct as noteScopeRetainedOwnerCoordination, d as runFinalizer, dr as createContinuationKeeper, dt as scopeRetainedOwnerContext, en as persistHarnessTranscript, er as seatExecutionProfile, et as consumeScopeRetainedOwnerResult, f as runTree, ft as scopeRetainedOwnerJournalRoot, g as isDriverSpec, h as driverExecutorFactory, hn as createOtelExporter, hr as bridgeModelRouteRefusal, i as RunParkedError, ii as recordRuntimeOwnedDriveHarnessProviderEvidence, it as beginScopeRetainedOwnerDrive, j as recordScopeOwnerMaterialization, jn as PEER_MAIL_WIRE_KEY, k as beginScopeOwnerAttempt, l as withRunParking, li as runtimeOwnedPendingExecutorMaterialization, lr as bestComposite, lt as bindScopeRetainedOwnerEnvironmentId, m as driverChild, mr as bridgeAdmissionRefusal, n as createSupervisor, nr as CheckUnavailableError, nt as scopeRetainedOwnerPriorSpend, o as bindScopeParkingDrain, oi as runtimeOwnedExecutorExecutionBinding, ot as reconcileScopeRetainedOwnerEnvironment, p as createRootHandle, q as recordScopeOwnerDriverAttempt, qn as classifyDriverFailure, qr as worktreeCliProfileMaterialization, ri as providerAttemptEvidence, rr as gateFactoryOnDeliverable, rt as scopeRetainedOwnerResult, si as runtimeOwnedExecutorMaterialization, sr as CONTINUATIONS_DIR, st as scopeRetainedOwnerRestorePoint, tn as readHarnessTranscript, tt as prepareScopeRetainedOwnerTask, u as bestDelivered, ui as runtimeOwnedScopeOwnerRuntime, ur as checkVerdictOf, ut as bindScopeRetainedOwnerProvider, wr as linkAbort, x as parseWorkerToolTraceArtifact, xn as toOtelAttributes, xt as createExecutor, yt as bindReusableExecutorExecutionId, z as assertRecursiveReservationPolicy, zn as createActivityLog, zr as fullProfileMaterialization, zt as routerBrain } from "./supervisor-rK5Y8en6.js";
+import { f as RuntimeRunStateError, i as ConfigError, m as ValidationError } from "./errors-AzSuGI23.js";
+import { B as teardownExecutor, C as withTimeout, E as addResourceSpend, N as DEFAULT_SUCCESSFUL_SHUTDOWN_MS, O as resourceTelemetry, R as isDeadlineAbortReason, S as unmeteredSpend, V as teardownSurfaces, c as errorMessage, f as isAsyncIterable, i as chargedTokens, k as withBudgetResources, m as promptCacheTokenClasses, n as addSpend, v as sleep, w as zeroSpend } from "./util-ebWMWzY0.js";
+import { _ as agentHarness, a as concreteProfileModel, c as profileModelExecutionSettings, l as profileProviderModel, n as assertModelAllowed, o as enforceTokenLimits, r as assertProfileModelsAllowed, s as profileBridgeWireModel, t as assertExecutableAgentProfile, v as harnessRunsAgent } from "./model-policy-C-RGAUW4.js";
+import { t as composeRuntimeHooks } from "./runtime-hooks-CsW2pfFk.js";
+import { c as createCancelAcknowledger, d as normalizeAnalyzeOnSettle, f as coordinationVerbNames, g as withRunContext, h as createInMemoryRunContext, l as createSteerAcknowledger, m as createFileRunContext, n as createCoordinationToolsForManager, o as resolveJsonPointer, p as safeJsonText, t as createCoordinationTools, u as budgetOverspendText } from "./coordination-manager-B7QadgrI.js";
+import { c as writeRunCancellation, i as readRunCancellation, r as readRunCancelRequest, s as watchRunCancellation, t as applyRunCancellation } from "./run-cancellation-CoJRKvih.js";
+import { n as createStdioToolServer, t as PROTOCOL_VERSION } from "./tool-server-CZWd_Opp.js";
 import { agentProfileSchema, canonicalAgentProfileDigest, canonicalCandidateDigest, canonicalCandidateJson, validateAgentProfileSecurity } from "@tangle-network/agent-interface";
 import { toolSpansToTraceAnalysisStore } from "@tangle-network/agent-eval";
 import { isRecord } from "@tangle-network/agent-core";
+import { z } from "zod";
 import { createHash, createHmac, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
 import { closeSync, constants, fsyncSync, openSync, writeSync } from "node:fs";
 import { dirname, join, resolve } from "node:path";
@@ -18,7 +19,7 @@ import { isMaterializerHarness } from "@tangle-network/agent-profile-materialize
 import { createServer } from "node:http";
 import { ATTR, agentIdentityAttributes } from "@tangle-network/agent-trace-contract";
 import { withProfileKb } from "@tangle-network/agent-interface/profile-kb";
-//#region src/runtime/supervise/supervise-identity.ts
+// src/runtime/supervise/supervise-identity.ts
 function externalExecutionId(kind, identity) {
 	return `${kind}-${canonicalCandidateDigest({
 		kind,
@@ -107,8 +108,7 @@ function coordinationEventId(context, event) {
 		event: detachedSnapshot(durableEvent, "supervise coordination event identity")
 	});
 }
-//#endregion
-//#region src/runtime/supervise/supervise-option-capture.ts
+// src/runtime/supervise/supervise-option-capture.ts
 const superviseOptionKeySet = /* @__PURE__ */ new Set([
 	"allowedModels",
 	"analysts",
@@ -259,11 +259,13 @@ function captureSuperviseOptions(opts) {
 	assertNoUncapturedExecutableOption(decisionData);
 	const capturedData = detachedSnapshot(decisionData, "supervise options");
 	const capturedCoordination = coordination === void 0 ? void 0 : (() => {
-		const { publicUrl, onAudit, ...configuration } = coordination;
+		const { publicUrl, onAudit, onReadReady, onControlReady, ...configuration } = coordination;
 		return Object.freeze({
 			...detachedSnapshot(configuration, "supervise coordination configuration"),
 			...publicUrl === void 0 ? {} : { publicUrl },
-			...onAudit === void 0 ? {} : { onAudit }
+			...onAudit === void 0 ? {} : { onAudit },
+			...onReadReady === void 0 ? {} : { onReadReady },
+			...onControlReady === void 0 ? {} : { onControlReady }
 		});
 	})();
 	const capturedBackend = backend === void 0 ? void 0 : snapshotExecutorConfig(backend);
@@ -356,8 +358,7 @@ function captureSuperviseOptions(opts) {
 		...otel === void 0 ? {} : { otel }
 	});
 }
-//#endregion
-//#region src/runtime/supervise/otel-spans.ts
+// src/runtime/supervise/otel-spans.ts
 /**
 * Supervisor tree → OTLP spans. OPT-IN, off by default.
 *
@@ -737,7 +738,8 @@ function assignBudget(attrs, value) {
 *  default) is DERIVED by content address from namespace and run id, so a resumed run rejoins its trace. */
 function normalizeTraceId(traceId, runId, namespace) {
 	if (traceId && /^[0-9a-f]{32}$/i.test(traceId)) return traceId.toLowerCase();
-	return contentAddress(traceId ?? (namespace === void 0 ? runId : `${namespace}\u0000${runId}`)).slice(7, 39);
+	const source = traceId ?? (namespace === void 0 ? runId : `${namespace}\u0000${runId}`);
+	return contentAddress(source).slice(7, 39);
 }
 function msToNano(ms) {
 	return (BigInt(Number.isFinite(ms) ? Math.floor(ms) : 0) * 1000000n).toString();
@@ -751,8 +753,7 @@ function str(value) {
 function truncate(value) {
 	return value.length > MAX_DETAIL_CHARS ? `${value.slice(0, MAX_DETAIL_CHARS)}…` : value;
 }
-//#endregion
-//#region src/runtime/supervise/root-stream.ts
+// src/runtime/supervise/root-stream.ts
 /**
 * The root manager's own provider stream, retained where Runtime owns it.
 *
@@ -927,8 +928,7 @@ async function readRootStream(runDir) {
 	}
 	return records;
 }
-//#endregion
-//#region src/runtime/anytime.ts
+// src/runtime/anytime.ts
 /**
 * The best-so-far fold — the ONE definition of "how good was the run after k results", shared by
 * the post-run anytime report below and by the LIVE progress-based stop rules
@@ -1075,8 +1075,7 @@ function renderAnytimeTable(report) {
 	}
 	return lines.join("\n");
 }
-//#endregion
-//#region src/runtime/supervise/stop-rules.ts
+// src/runtime/supervise/stop-rules.ts
 /**
 *
 * PROGRESS-BASED STOP RULES — end a long-horizon run for the right reason.
@@ -1273,8 +1272,7 @@ function progressStop(tracker, rule, ledger, scope, now, stallAfterMs) {
 	});
 	return tracker.evaluate(rule, scope, stallAfterMs !== void 0 ? { stallAfterMs } : void 0);
 }
-//#endregion
-//#region src/runtime/supervise/supervise-agent-options.ts
+// src/runtime/supervise/supervise-agent-options.ts
 /** A stop rule as a function, or the declared plateau form a record carries as data. */
 function stopRuleOf(rule) {
 	if (typeof rule === "function") return rule;
@@ -1291,8 +1289,7 @@ function supervisorTurnOptions(options) {
 		...options.onDriverAttempt ? { onDriverAttempt: options.onDriverAttempt } : {}
 	};
 }
-//#endregion
-//#region src/runtime/supervise/graph-edge-ledger.ts
+// src/runtime/supervise/graph-edge-ledger.ts
 var GraphEdgeLedger = class {
 	journal;
 	runId;
@@ -1407,8 +1404,7 @@ var GraphEdgeLedger = class {
 	}
 };
 const pendingKey = (parentNodeId, assignmentId) => `${parentNodeId ?? ""}\u0000${assignmentId}`;
-//#endregion
-//#region src/runtime/supervise/prompt-registry.ts
+// src/runtime/supervise/prompt-registry.ts
 /**
 *
 * The kernel prompt registry — versioned prompt text as DATA, addressed by `PromptHandle`.
@@ -1540,8 +1536,7 @@ function kernelPromptRegistry() {
 		dumbContinuationPassPrompt
 	]);
 }
-//#endregion
-//#region src/runtime/supervise/graph-topology.ts
+// src/runtime/supervise/graph-topology.ts
 /**
 * `run_graph`: a graph a manager starts as one subtask. The topology is read from model-written
 * data or a stored graph, validated exactly as `runGraph` validates a root graph, and carried on
@@ -1848,8 +1843,7 @@ function graphSubtaskOf(profile) {
 	const raw = profile.metadata?.[runtimeGraphMetadataKey];
 	return raw === void 0 ? void 0 : parseGraphSubtaskTopology(raw);
 }
-//#endregion
-//#region src/runtime/supervise/graph-flow.ts
+// src/runtime/supervise/graph-flow.ts
 /** A flow node's usable settle matched no routes edge leaving it (`unrouted`), or a fired edge named
 *  a node that still had a running worker (`target-live`). The flow spawned nothing more; the full
 *  evidence rides on the error, shaped like `GraphEdgeCapError`. */
@@ -2330,8 +2324,7 @@ function createFlowRun() {
 		failure
 	};
 }
-//#endregion
-//#region src/runtime/supervise/graph-overlay.ts
+// src/runtime/supervise/graph-overlay.ts
 /**
 * The graph layer over the managers that run one `AgentGraph`.
 *
@@ -2632,8 +2625,7 @@ function ledgerAnalyzes(ledger, edge, outcome, bytes, reason, workerId) {
 		...workerId !== void 0 ? { workerId } : {}
 	}, true);
 }
-//#endregion
-//#region src/runtime/supervise/flow-brain.ts
+// src/runtime/supervise/flow-brain.ts
 const flowBrains = /* @__PURE__ */ new WeakSet();
 /**
 * The brain of a flow graph's runtime-owned root manager. It never calls a model: every turn
@@ -2654,8 +2646,7 @@ function runtimeFlowBrain() {
 function isRuntimeFlowBrain(brain) {
 	return flowBrains.has(brain);
 }
-//#endregion
-//#region src/runtime/supervise/supervise-budget.ts
+// src/runtime/supervise/supervise-budget.ts
 /**
 * Which of a driver's budget channels are spent, with their numbers, or `undefined` while none is.
 * The bare 'supervisor budget exhausted' named no channel: on queens21-h22-capture-root-2-20261019c
@@ -2736,8 +2727,7 @@ function unmeteredOwnerCache(total, committed) {
 		...total.cacheBreakdownKnown === false ? { cacheBreakdownKnown: false } : {}
 	};
 }
-//#endregion
-//#region src/runtime/tool-loop.ts
+// src/runtime/tool-loop.ts
 /**
 * THE canonical agentic tool-loop. One inference turn → run any requested tools → fold the
 * results back as `tool` messages → repeat, until the model answers without a tool call or the
@@ -2975,8 +2965,7 @@ async function runBrainLoop(opts) {
 		...retainedCodeMode()
 	};
 }
-//#endregion
-//#region src/runtime/supervise/driver-budget-guards.ts
+// src/runtime/supervise/driver-budget-guards.ts
 /** Spawn-progress is impossible: the pool can't afford another worker AND nothing is in flight to
 *  await. A long-horizon driver bounded by the conserved pool stops here instead of spinning (the
 *  in-loop budget guard the turn cap alone never provided). Checks BOTH conserved channels: tokens
@@ -3016,8 +3005,7 @@ function deadlinePassed(scope, now) {
 	const b = scope.budget;
 	return b.deadlineMs > 0 && now() >= b.deadlineMs;
 }
-//#endregion
-//#region src/runtime/supervise/driver-prompt-cache.ts
+// src/runtime/supervise/driver-prompt-cache.ts
 /** The USD-denominated members of {@link PromptCacheUsage} — the schema, not a guess. Every
 *  other known member (`readTokens`, `writeTokens`, `missTokens`) is a token COUNT. */
 const PROMPT_CACHE_USD_FIELDS = /* @__PURE__ */ new Set(["readSavingsUsd"]);
@@ -3133,8 +3121,7 @@ function safeJson(v) {
 		return String(v);
 	}
 }
-//#endregion
-//#region src/runtime/supervise/driver-tool-dispatch.ts
+// src/runtime/supervise/driver-tool-dispatch.ts
 /** Run a work tool. A throw is data to the driver (it can recover next turn), not a crash — fold
 *  the error back as a string result. null/undefined passes through (the caller treats it as "not
 *  handled" and falls to the coordination dispatch). */
@@ -3152,14 +3139,13 @@ async function runTool(tool, args) {
 		return { error: errorMessage(e) };
 	}
 }
-//#endregion
-//#region src/runtime/supervise/wake.ts
+// src/runtime/supervise/wake.ts
 /** How long a waiting manager hears nothing before Runtime wakes it to reconsider: 15 min. */
-const DEFAULT_WAKE_HEARTBEAT_MS = 15 * 6e4;
+const DEFAULT_WAKE_HEARTBEAT_MS = 9e5;
 /** How long a wake waits for more events after its first, while other workers still run: 2 s. */
 const DEFAULT_WAKE_DEBOUNCE_MS = 2e3;
 /** How long before its deadline a manager is woken once to submit its best result: 15 min. */
-const DEFAULT_DEADLINE_WARNING_MS = 15 * 6e4;
+const DEFAULT_DEADLINE_WARNING_MS = 9e5;
 /** The instruction every manager receives about waiting. */
 const WAIT_BY_ENDING_TURN = "When you are waiting for workers, end your turn. You will be woken with what happened: a worker settled, a finding, a message or answer from your lead, or the deadline approaching.";
 function resolveWakePolicy(policy) {
@@ -3218,8 +3204,7 @@ function composeWakeInput(wake, context) {
 	lines.push("", WAIT_BY_ENDING_TURN);
 	return lines.join("\n");
 }
-//#endregion
-//#region src/runtime/supervise/driver-brain-turns.ts
+// src/runtime/supervise/driver-brain-turns.ts
 /** How often a waiting driver applies operator cancels and steers between its turns. */
 const WAITING_CONTROL_POLL_MS = 5e3;
 /** The evidence fault a brain reply carries, if any: identity, transport count, or prompt cache. */
@@ -3466,8 +3451,7 @@ var DriverBrainTurns = class {
 		for (const lease of this.leases.splice(0)) lease.release();
 	}
 };
-//#endregion
-//#region src/runtime/supervise/driver-tool-surface.ts
+// src/runtime/supervise/driver-tool-surface.ts
 /** Mount this manager's coordination tools over `scope` and select exactly the granted tools. */
 async function openDriverToolSurface(opts, scope) {
 	const ownerReader = opts.spawnResourceReader ?? (opts.spawnResourceRoot === void 0 ? scopeRetainedOwnerResourceReader(scope) : void 0);
@@ -3548,8 +3532,7 @@ async function openDriverToolSurface(opts, scope) {
 		})
 	};
 }
-//#endregion
-//#region src/runtime/supervise/driver-brain-agent.ts
+// src/runtime/supervise/driver-brain-agent.ts
 /**
 * Build the intelligent recursive driver. Its `act` is the LLM tool-loop; spawn it as a
 * `driverChild` (`driver-executor.ts`) to run it inside a nested scope, recursively.
@@ -3699,8 +3682,7 @@ function driverInitialMessages(opts, system, task, scope) {
 		}] : []
 	];
 }
-//#endregion
-//#region src/runtime/supervise/supervisor-agent-profile.ts
+// src/runtime/supervise/supervisor-agent-profile.ts
 /**
 * The completion check of a managed child that no `resolveDeliverable` gave a check of its own, a
 * `run_graph` node included: its accepted submission settles it, and the result goes to the manager
@@ -3770,7 +3752,11 @@ function assertRouterArmResourcePolicy(profile) {
 */
 function resolveSupervisorSystemPrompt(profile) {
 	const promptSystem = profile.prompt?.systemPrompt;
-	const lines = [...profile.prompt?.instructions ?? [], ...resourceInstructionLines(profile.resources?.instructions)];
+	const lines = [
+		...profile.prompt?.appendSystemPrompt === void 0 ? [] : [profile.prompt.appendSystemPrompt],
+		...profile.prompt?.instructions ?? [],
+		...resourceInstructionLines(profile.resources?.instructions)
+	];
 	if (lines.length === 0) return promptSystem;
 	return (promptSystem !== void 0 ? [promptSystem, ...lines] : lines).join("\n");
 }
@@ -3780,8 +3766,7 @@ function resolveSupervisorModelId(profile) {
 	return concreteProfileModel(profile);
 }
 /** Listener, authenticated remote endpoint, and bounded request policy for one manager. */
-//#endregion
-//#region src/runtime/supervise/supervisor-coordination-observers.ts
+// src/runtime/supervise/supervisor-coordination-observers.ts
 /** Forward the same declared observer routes to router and external manager coordination. */
 function supervisorCoordinationObservers(deps) {
 	return {
@@ -3796,13 +3781,19 @@ function supervisorCoordinationObservers(deps) {
 		...deps.stallAfterMs !== void 0 ? { stallAfterMs: deps.stallAfterMs } : {}
 	};
 }
-//#endregion
-//#region src/runtime/supervise/coordination-credentials.ts
+// src/runtime/supervise/coordination-credentials.ts
 /**
 * The credentials one coordination listener accepts: the manager's bearer token (random, or an HMAC
-* claim set under caller-owned signing keys), the separate read-only token, rotation and the
+* claim set under caller-owned signing keys), separate read-only and control tokens, rotation and the
 * revocation of every token it replaces.
 */
+/** Exact operator authority, independent of the manager's authored tool grants. */
+const coordinationControlToolNames = Object.freeze([
+	"observe_agent",
+	"read_journal",
+	"steer_agent",
+	"cancel_worker"
+]);
 /** The bearer token in an `Authorization` header, or an empty buffer. */
 function bearerToken(authorization) {
 	return typeof authorization === "string" && authorization.startsWith("Bearer ") ? Buffer.from(authorization.slice(7)) : Buffer.alloc(0);
@@ -3815,6 +3806,7 @@ function createCoordinationCredentials(input) {
 		keys: { ...auth.signingKeys.keys }
 	} : void 0;
 	let readerToken = Buffer.from(randomBytes(32).toString("base64url"));
+	let controllerToken = Buffer.from(randomBytes(32).toString("base64url"));
 	let token;
 	let expiresAt;
 	let headers = Object.freeze({});
@@ -3844,6 +3836,7 @@ function createCoordinationCredentials(input) {
 			text = `${payload}.${createHmac("sha256", signingKeys.keys[signingKeys.activeKeyId]).update(payload).digest("base64url")}`;
 		}
 		readerToken = Buffer.from(randomBytes(32).toString("base64url"));
+		controllerToken = Buffer.from(randomBytes(32).toString("base64url"));
 		token = Buffer.from(text);
 		headers = Object.freeze({ Authorization: `Bearer ${text}` });
 	};
@@ -3864,6 +3857,7 @@ function createCoordinationCredentials(input) {
 			return false;
 		}
 	};
+	const capabilityRefused = (supplied, expected) => input.isClosed() || supplied.length !== expected.length || !timingSafeEqual(supplied, expected) || expiresAt !== void 0 && expiresAt <= Date.now();
 	return {
 		rotate,
 		setAudience: (next) => {
@@ -3873,7 +3867,11 @@ function createCoordinationCredentials(input) {
 			if (input.scopeSignal.aborted) return "scope-stopped";
 			return valid(supplied) ? void 0 : "credential-refused";
 		},
-		readerRefused: (supplied) => supplied.length !== readerToken.length || !timingSafeEqual(supplied, readerToken) || expiresAt !== void 0 && expiresAt <= Date.now(),
+		readerRefused: (supplied) => input.scopeSignal.aborted || input.lifetimeSignal?.aborted === true || capabilityRefused(supplied, readerToken),
+		controllerRefused: (supplied) => {
+			if (input.scopeSignal.aborted || input.lifetimeSignal?.aborted) return "scope-stopped";
+			return capabilityRefused(supplied, controllerToken) ? "credential-refused" : void 0;
+		},
 		get headers() {
 			return headers;
 		},
@@ -3882,11 +3880,13 @@ function createCoordinationCredentials(input) {
 		},
 		get readerToken() {
 			return readerToken;
+		},
+		get controllerHeaders() {
+			return Object.freeze({ Authorization: `Bearer ${controllerToken.toString()}` });
 		}
 	};
 }
-//#endregion
-//#region src/runtime/supervise/coordination-http.ts
+// src/runtime/supervise/coordination-http.ts
 /** The JSON-RPC error a refusal carries. MCP clients put a non-2xx body into the error the agent
 *  sees, so without it the agent reads only `Error POSTing to endpoint:` and a status at best. The
 *  messages are fixed text: never a credential, a request body or an arbitrary error string. */
@@ -3930,7 +3930,7 @@ function coordinationHttpLimits(options) {
 	const requestTimeoutMs = positive("requestTimeoutMs", options.requestTimeoutMs, 9e4);
 	if (requestTimeoutMs > 2147483647) throw new ConfigError("coordination requestTimeoutMs exceeds the timer limit");
 	return {
-		maxRequestBytes: positive("maxRequestBytes", options.maxRequestBytes, 1024 * 1024),
+		maxRequestBytes: positive("maxRequestBytes", options.maxRequestBytes, 1048576),
 		requestTimeoutMs,
 		maxConcurrentRequests: positive("maxConcurrentRequests", options.maxConcurrentRequests, 32),
 		requestsPerMinute: positive("requestsPerMinute", options.requestsPerMinute, 600),
@@ -4139,8 +4139,7 @@ function coordinationHttpHandler(input) {
 		});
 	};
 }
-//#endregion
-//#region src/runtime/supervise/coordination-mcp-listener.ts
+// src/runtime/supervise/coordination-mcp-listener.ts
 /**
 * The HTTP side of one coordination server: which hosts and paths it answers, who may call each
 * (manager, read-only observer, one peer-mail capability), and the public address it advertises.
@@ -4151,6 +4150,7 @@ function openCoordinationListenerState() {
 		audiences: /* @__PURE__ */ new Set(),
 		paths: /* @__PURE__ */ new Set(["/mcp"]),
 		readPaths: /* @__PURE__ */ new Set(),
+		controlPaths: /* @__PURE__ */ new Set(),
 		mailPaths: /* @__PURE__ */ new Set()
 	};
 }
@@ -4190,6 +4190,31 @@ function readOnlyHandler(ctx, coord) {
 		handle: (message) => readMcp.handle(message)
 	});
 }
+/** Operator access calls the same owned-worker handlers, with no spawn/submit/stop authority. */
+function controlHandler(ctx, coord) {
+	const toolNames = new Set(coordinationControlToolNames);
+	const controlMcp = createStdioToolServer({
+		serverName: "supervisor-control",
+		serverVersion: "1",
+		tools: coord.tools.filter((tool) => toolNames.has(tool.name))
+	});
+	return coordinationHttpHandler({
+		options: ctx.opts,
+		identity: ctx.identity,
+		toolNames,
+		backgroundActions: () => 0,
+		authorize: (req) => {
+			const refused = authority(ctx, req);
+			if (refused) return refused;
+			const credential = ctx.credentials.controllerRefused(bearerToken(req.headers.authorization));
+			return credential === void 0 ? void 0 : {
+				status: 401,
+				reason: credential
+			};
+		},
+		handle: (message) => controlMcp.handle(message)
+	});
+}
 function managerHandler(ctx, mcp, servedTools, background) {
 	return coordinationHttpHandler({
 		options: ctx.opts,
@@ -4244,10 +4269,12 @@ function peerMailHandler(ctx, coord, capabilityId) {
 function createCoordinationListener(ctx, bound) {
 	const { coord } = bound;
 	const readHandler = readOnlyHandler(ctx, coord);
+	const operatorHandler = controlHandler(ctx, coord);
 	const peerHandlers = /* @__PURE__ */ new Map();
 	const mainHandler = managerHandler(ctx, bound.mcp, bound.servedTools, bound.background);
 	return createServer((req, res) => {
 		if (ctx.state.readPaths.has(req.url ?? "")) return readHandler(req, res);
+		if (ctx.state.controlPaths.has(req.url ?? "")) return operatorHandler(req, res);
 		for (const base of ctx.state.mailPaths) {
 			if (!(req.url ?? "").startsWith(base + "/")) continue;
 			const capabilityId = (req.url ?? "").slice(base.length + 1);
@@ -4266,8 +4293,7 @@ function createCoordinationListener(ctx, bound) {
 		return mainHandler(req, res);
 	});
 }
-//#endregion
-//#region src/runtime/supervise/single-flight-tools.ts
+// src/runtime/supervise/single-flight-tools.ts
 /**
 * Serve method-supplied supervisor tools on the coordination MCP as single-flight, fenced calls.
 *
@@ -4378,8 +4404,7 @@ function toolCallReceipt(tool, receipt, elapsedMs) {
 		instruction: `${tool} is still running; nothing failed. Do not call it again: its result arrives with receipt ${receipt} when you are next woken. Continue other work, or end your turn to wait.`
 	};
 }
-//#endregion
-//#region src/runtime/supervise/coordination-mcp-tools.ts
+// src/runtime/supervise/coordination-mcp-tools.ts
 /**
 * Which tools one coordination server serves: the options its coordination tools are built from,
 * and the granted subset of coordination verbs and node tools, fenced and single-flight.
@@ -4463,9 +4488,8 @@ function bindServedTools(opts, coord, fenceMs) {
 		background: () => nodeTools.background() + fencedVerbs.background()
 	};
 }
-//#endregion
-//#region src/runtime/supervise/coordination-preflight.ts
-const MAX_RESPONSE_BYTES = 1024 * 1024;
+// src/runtime/supervise/coordination-preflight.ts
+const MAX_RESPONSE_BYTES = 1048576;
 var CoordinationPreflightError = class extends ConfigError {
 	constructor(reason) {
 		super(`coordination public endpoint preflight failed: ${reason}`);
@@ -4554,8 +4578,7 @@ async function preflightPublicCoordination(input) {
 		linked.release();
 	}
 }
-//#endregion
-//#region src/runtime/supervise/coordination-mcp.ts
+// src/runtime/supervise/coordination-mcp.ts
 /** Hosts that reach only this machine (incl. IPv4-mapped and bracketed IPv6 spellings). A name not
 *  recognizably loopback counts as REMOTE: whether it resolves to loopback is unknowable here. */
 function isLoopbackHost(host) {
@@ -4576,6 +4599,7 @@ function assertCoordinationTransport(options) {
 		for (const [id, key] of Object.entries(signingKeys.keys)) if (!/^[A-Za-z0-9_-]{1,64}$/.test(id) || typeof key !== "string" || Buffer.byteLength(key) < 32) throw new ConfigError("coordination signing keys require bounded key IDs and at least 32 secret bytes");
 	}
 	if (options.onReadReady && !options.authentication) throw new ConfigError("coordination read capability publication requires authentication");
+	if (options.onControlReady && !options.authentication) throw new ConfigError("coordination control capability publication requires authentication");
 	coordinationHttpLimits(options);
 }
 /** The longest any coordination call holds its response, whatever the request timeout: under the
@@ -4616,6 +4640,7 @@ async function bindCoordinationAddress(ctx, port, addressSignal) {
 	state.paths.add(publicAddress.pathname);
 	for (const path of state.paths) {
 		state.readPaths.add(path.replace(/\/$/, "") + "/read");
+		state.controlPaths.add(path.replace(/\/$/, "") + "/control");
 		state.mailPaths.add(path.replace(/\/$/, "") + "/mail");
 	}
 	if (configured !== void 0) await preflightPublicCoordination({
@@ -4644,6 +4669,7 @@ async function serveCoordinationMcpForManager(opts, lifetime) {
 		identity,
 		toolNames: opts.toolNames,
 		scopeSignal: opts.scope.signal,
+		lifetimeSignal: lifetime,
 		isClosed: () => state.closed
 	});
 	const ctx = {
@@ -4716,6 +4742,14 @@ async function serveCoordinationMcpForManager(opts, lifetime) {
 		get headers() {
 			return credentials.headers;
 		},
+		get control() {
+			if (!opts.authentication) throw new ConfigError("coordination control access requires authentication");
+			return {
+				...identity,
+				url: url.replace(/\/$/, "") + "/control",
+				headers: credentials.controllerHeaders
+			};
+		},
 		get credentialExpiresAt() {
 			return credentials.expiresAt;
 		},
@@ -4743,6 +4777,7 @@ async function serveCoordinationMcpForManager(opts, lifetime) {
 			...handle.readOnly,
 			...identity
 		}), opts.scope.signal, "read capability publication aborted");
+		await runAbortable(async () => opts.onControlReady?.(handle.control), opts.scope.signal, "control capability publication aborted");
 	} catch (error) {
 		await handle.close();
 		throw error;
@@ -4752,8 +4787,7 @@ async function serveCoordinationMcpForManager(opts, lifetime) {
 		controls: coord
 	};
 }
-//#endregion
-//#region src/runtime/supervise/supervisor-tool-binding.ts
+// src/runtime/supervise/supervisor-tool-binding.ts
 function createVerbSlot() {
 	let bound;
 	let waits;
@@ -4842,8 +4876,7 @@ function bindSupervisorNodeObserver(context, observeNodeEvent, onEvent) {
 		await onEvent?.(event, record);
 	};
 }
-//#endregion
-//#region src/runtime/supervise/worker-control-observer.ts
+// src/runtime/supervise/worker-control-observer.ts
 /** Observe durable worker controls while the native harness owns the manager's turn loop. */
 function observeWorkerControls(options) {
 	const { dir, coord, scope, signal, controlScope, onError } = options;
@@ -4927,8 +4960,7 @@ function observeWorkerControls(options) {
 		close: () => closing ??= finish()
 	};
 }
-//#endregion
-//#region src/runtime/supervise/supervisor-manager-session.ts
+// src/runtime/supervise/supervisor-manager-session.ts
 /** Bind this act's node tools and serve its coordination server, then route the lead's messages. */
 async function openManagerSession(config, task, scope) {
 	const { deps } = config;
@@ -5078,15 +5110,14 @@ function observeManagerControls(config, session) {
 		}
 	});
 }
-//#endregion
-//#region src/runtime/supervise/driver-retry-loop.ts
+// src/runtime/supervise/driver-retry-loop.ts
 const DEFAULT_MAX_CONSECUTIVE_FAILURES = 3;
 const DEFAULT_MAX_ATTEMPTS = Number.POSITIVE_INFINITY;
 const DEFAULT_INITIAL_BACKOFF_MS$1 = 2e3;
 const DEFAULT_MAX_BACKOFF_MS$1 = 3e4;
 const DEFAULT_TRANSIENT_OUTAGE_MS = 9e5;
-const BARREN_PAUSE_FIRST_MS = 5 * 6e4;
-const BARREN_PAUSE_MAX_MS = 60 * 6e4;
+const BARREN_PAUSE_FIRST_MS = 3e5;
+const BARREN_PAUSE_MAX_MS = 36e5;
 /** The stops an opted-in root pauses on (`DriverRetryRun.stopPause`). `completed`, `aborted` and a
 *  declared `deadline` end the run; `supervise()` refuses `driverRetry.pauseRootStops` beside `retry-disabled`. */
 const PAUSED_STOPS = /* @__PURE__ */ new Set([
@@ -5116,7 +5147,7 @@ function barrenPauseMs(streak, maxBarren) {
 */
 const INSTANT_FAILURE_MS = 3e4;
 const REPEATED_FAILURE_LIMIT = 10;
-const REPEATED_FAILURE_WINDOW_MS = 5 * 6e4;
+const REPEATED_FAILURE_WINDOW_MS = 3e5;
 /** Consecutive identical reconciliation failures of one pending invocation that resolve it. */
 const SAME_PENDING_LIMIT = 2;
 /**
@@ -5639,8 +5670,7 @@ var DriverRetryLoop = class {
 		return true;
 	}
 };
-//#endregion
-//#region src/runtime/supervise/driver-retry.ts
+// src/runtime/supervise/driver-retry.ts
 /**
 * Root-driver retry — the root gets the same second chance a worker's transport already has.
 *
@@ -5777,8 +5807,7 @@ async function runDriverWithRetry(run) {
 		if (!await loop.afterCompletion(attempt, before, startedAt)) return;
 	}
 }
-//#endregion
-//#region src/runtime/supervise/reentry.ts
+// src/runtime/supervise/reentry.ts
 /** Continuity when nothing is proven: compose the full state. */
 const UNPROVEN_CONTINUITY = Object.freeze({
 	session: "new",
@@ -5899,8 +5928,7 @@ function taskText(task) {
 		return String(task);
 	}
 }
-//#endregion
-//#region src/runtime/supervise/run-traces.ts
+// src/runtime/supervise/run-traces.ts
 /**
 * A manager's own run as one trace store: what the continuation's question panel reads.
 *
@@ -6032,8 +6060,7 @@ async function runTraceAnalysisStore(input) {
 	const spans = [...records === void 0 || input.root === void 0 ? [] : rootStreamToolSpans(records, input.root.id), ...(await Promise.all(input.workers.map((worker) => workerSpans(worker, input.blobs)))).flat()];
 	return spans.length === 0 ? void 0 : toolSpansToTraceAnalysisStore(spans);
 }
-//#endregion
-//#region src/runtime/supervise/supervisor-manager-turns.ts
+// src/runtime/supervise/supervisor-manager-turns.ts
 /** The finalizer over this act's settled workers; the check it runs is recorded as a check read. */
 function managerFinalizer(deps, session) {
 	const { mcp, controls } = session;
@@ -6454,8 +6481,7 @@ async function recordManagerAttempt(loop, record) {
 	});
 	await loop.config.deps.onDriverAttempt?.(record);
 }
-//#endregion
-//#region src/runtime/supervise/supervisor-external-manager.ts
+// src/runtime/supervise/supervisor-external-manager.ts
 /** EXTERNAL arm: a caller-driven harness uses the coordination verbs over the live scope. */
 function externalSupervisorAgent(build) {
 	const { deps, name } = build;
@@ -6584,8 +6610,7 @@ async function settleManagerOutput(config, mcp, contractDeclared, finalize, cand
 	}
 	await mcp.finishAnalysis({ status: "done" });
 }
-//#endregion
-//#region src/runtime/supervise/supervisor-router-config.ts
+// src/runtime/supervise/supervisor-router-config.ts
 /** Validate a manager's coordination authentication and request limits before execution. */
 function assertCoordinationBinding(binding) {
 	assertCoordinationTransport(binding ?? {});
@@ -6646,8 +6671,7 @@ function routerBrainFromProfile(profile, router) {
 		...profile.model?.reasoningEffort ? { reasoningEffort: profile.model.reasoningEffort } : {}
 	});
 }
-//#endregion
-//#region src/runtime/supervise/supervisor-agent-build.ts
+// src/runtime/supervise/supervisor-agent-build.ts
 function buildSupervisorAgent(profile, deps, testBrain) {
 	const exactProfile = agentProfileSchema.parse(profile);
 	assertExecutableAgentProfile(exactProfile, "supervisorAgent");
@@ -6778,8 +6802,7 @@ function routerSupervisorAgent(arm) {
 		}
 	};
 }
-//#endregion
-//#region src/runtime/supervise/supervisor-agent.ts
+// src/runtime/supervise/supervisor-agent.ts
 /** Build a supervisor `Agent` from its profile: the brain resolves from `profile.harness`
 * (backend-as-data), the same resolution rule as every worker. */
 function supervisorAgent(profile, deps) {
@@ -6791,8 +6814,7 @@ function supervisorAgentWithTestBrain(profile, deps) {
 	const { brain, ...runtimeDeps } = deps;
 	return buildSupervisorAgent(profile, runtimeDeps, brain);
 }
-//#endregion
-//#region src/runtime/supervise/supervise-profile-admission.ts
+// src/runtime/supervise/supervise-profile-admission.ts
 /**
 * NOT a harness-name test — `ExecutorConfig.backend` is a discriminated-union TAG naming HOW a
 * profile is materialized (bridge / sandbox / cli-worktree / cli-in-place / router / cli /
@@ -6815,9 +6837,10 @@ function backendProfileMaterialization(backend) {
 	}
 }
 function assertProfileContract(profile, contract, context, runtimeConsumesCoordinationTools = false) {
+	const materializedProfile = runtimeConsumesCoordinationTools ? providerVisibleProfile(profile) : profile;
 	assertProfileMaterialization({
 		contract,
-		changedAxes: profileMaterializationAxes$1(runtimeConsumesCoordinationTools ? providerVisibleProfile(profile) : profile),
+		changedAxes: profileMaterializationAxes$1(materializedProfile),
 		context
 	});
 }
@@ -6918,6 +6941,7 @@ const routerSupervisorProfileMaterialization = defineProfileMaterializationContr
 		"version",
 		"tags",
 		"systemPrompt",
+		"appendSystemPrompt",
 		"instructions",
 		"resourceInstructions",
 		"resourceFailOnError",
@@ -6956,8 +6980,7 @@ function isExternalSupervisor(profile) {
 function automaticDriverBackendSupported(backend, coordination) {
 	return backend.backend === "bridge" || backend.backend === "provider" && !backend.steering && coordination?.authentication !== void 0 && coordination.publicUrl !== void 0;
 }
-//#endregion
-//#region src/runtime/supervise/nested-manager-deps.ts
+// src/runtime/supervise/nested-manager-deps.ts
 /** Deps for the nested manager of a managed child: coordination wiring, policy and controls. */
 function buildNestedManagerDeps(child) {
 	const { env, seat, admitted, spawnContext } = child;
@@ -7091,8 +7114,7 @@ function nestedLogAndControlDeps(child) {
 		...options.runDir === void 0 && options.steerDir === void 0 ? {} : { controlScope: "subtree" }
 	};
 }
-//#endregion
-//#region src/runtime/supervise/supervise-runtime-attachments.ts
+// src/runtime/supervise/supervise-runtime-attachments.ts
 /**
 * The reserved MCP alias one worker's PEER MAIL capability endpoint mounts under.
 *
@@ -7168,8 +7190,7 @@ async function providerAcceptsCoordinationAttachments(backend) {
 * its credential. A value the caller set wins.
 */
 const CLAUDE_CODE_ONE_HOUR_CACHE = "ENABLE_PROMPT_CACHING_1H";
-//#endregion
-//#region src/runtime/supervise/supervise-worker-backend.ts
+// src/runtime/supervise/supervise-worker-backend.ts
 /**
 * Build the worker seam from a backend (WHERE workers run) + an optional completion oracle (the
 * deliverable check that makes "settled ⟺ delivered" true — the guard against "ran but didn't
@@ -7215,7 +7236,7 @@ function workerFromBackend(backend, deliverable, seams) {
 		const boundSessionId = boundBackend.backend === "bridge" ? boundBackend.sessionId : void 0;
 		const peerMailAttachment = peerMailRuntimeAttachment(profile, capturedBackend, spawnContext);
 		if (spawnContext?.peerMailUrl && boundBackend.backend === "provider" && Object.hasOwn(boundBackend.defaults?.runtimeAttachments?.mcp ?? {}, "agent-runtime-peer-mail")) throw new ValidationError("workerFromBackend: provider defaults contain the reserved peer-mail attachment alias");
-		const rawFactory = createExecutor(spawnContext?.peerMailUrl && boundBackend.backend === "provider" ? {
+		const leafBackend = spawnContext?.peerMailUrl && boundBackend.backend === "provider" ? {
 			...boundBackend,
 			steering: boundBackend.steering ?? {},
 			defaults: {
@@ -7231,7 +7252,8 @@ function workerFromBackend(backend, deliverable, seams) {
 					}
 				}
 			}
-		} : boundBackend);
+		} : boundBackend;
+		const rawFactory = createExecutor(leafBackend);
 		const baseFactory = deliverable ? gateFactoryOnDeliverable(rawFactory, deliverable) : rawFactory;
 		const executorFactory = (spec, ctx) => {
 			if (boundSessionId !== void 0 && ctx.node?.nodeId !== void 0) bridgeSessionByWorker.set(ctx.node.nodeId, boundSessionId);
@@ -7317,8 +7339,7 @@ function withModelSubstitution(agent, substitution) {
 		}
 	};
 }
-//#endregion
-//#region src/runtime/supervise/spawn-admission.ts
+// src/runtime/supervise/spawn-admission.ts
 /** Authorize one spawn and decide everything about it that does not depend on how it runs. */
 function admitSpawn(env, seat, authoredProfile, spawnContext, recovering) {
 	const { options, applyTraceTools, deliverable } = env.setup;
@@ -7370,7 +7391,10 @@ function admitSpawn(env, seat, authoredProfile, spawnContext, recovering) {
 		depth
 	});
 	const security = validateAgentProfileSecurity(authorized, env.securityPolicy);
-	if (!security.ok) throw new ValidationError(`supervise: spawned AgentProfile refused: ${security.issues.filter((issue) => issue.level === "error").map((issue) => `${issue.code}${issue.path ? ` at ${issue.path}` : ""}`).join(", ")}`);
+	if (!security.ok) {
+		const details = security.issues.filter((issue) => issue.level === "error").map((issue) => `${issue.code}${issue.path ? ` at ${issue.path}` : ""}`).join(", ");
+		throw new ValidationError(`supervise: spawned AgentProfile refused: ${details}`);
+	}
 	assertProfileModelsAllowed(authorized, options.allowedModels);
 	const selectedDeliverable = options.resolveDeliverable?.(postAuthorizationContext);
 	const childDeliverable = selectedDeliverable === void 0 ? deliverable : selectedDeliverable === null ? void 0 : captureDeliverable(selectedDeliverable, `supervise deliverable for ${JSON.stringify(spawnContext.label)}`);
@@ -7386,8 +7410,228 @@ function admitSpawn(env, seat, authoredProfile, spawnContext, recovering) {
 		usesRuntimeCoordination: declaredRuntimeToolNames(authorized).length > 0 || seatManagedLeaf
 	};
 }
-//#endregion
-//#region src/runtime/supervise/graph-registry.ts
+// src/runtime/supervise/graph-file-schema.ts
+const scalar = z.union([
+	z.string(),
+	z.number().finite(),
+	z.boolean(),
+	z.null()
+]);
+const pointer = z.string().regex(/^(?:\/(?:[^~]|~[01])*)*$/);
+const matchBase = {
+	node: z.string().min(1).optional(),
+	pointer
+};
+const equals = z.strictObject({
+	...matchBase,
+	equals: scalar
+});
+const oneOf = z.strictObject({
+	...matchBase,
+	in: z.array(scalar)
+});
+const exists = z.strictObject({
+	...matchBase,
+	exists: z.boolean()
+});
+const match = z.union([
+	equals,
+	oneOf,
+	exists
+]);
+/** The same data grammar as routes; no executable expressions or additional operators. */
+const graphRouteWhenSchema = z.union([match, z.strictObject({ all: z.array(match).min(1) })]);
+const parameter = z.strictObject({
+	default: z.unknown().optional(),
+	type: z.enum([
+		"string",
+		"number",
+		"integer",
+		"boolean",
+		"object",
+		"array",
+		"null"
+	]).optional()
+});
+const command = z.strictObject({
+	command: z.string().min(1),
+	timeoutMs: z.number().int().positive().optional()
+});
+const nonnegativeInteger = z.number().int().nonnegative();
+/** Authoring envelope. Canonical profiles and topology are validated by their existing owners. */
+const graphFileSchema = z.strictObject({
+	digest: z.string().min(1).optional(),
+	graph: z.string().min(1).optional(),
+	describe: z.string().optional(),
+	params: z.record(z.string().min(1), parameter).optional(),
+	nodes: z.array(z.strictObject({
+		id: z.string().min(1),
+		profile: z.record(z.string(), z.unknown()).optional(),
+		seat: z.union([z.string().min(1), z.array(z.string().min(1)).min(1)]).optional(),
+		needs: z.array(z.string().min(1)).optional()
+	})).min(1),
+	entry: z.array(z.union([z.string().min(1), z.strictObject({
+		node: z.string().min(1),
+		task: z.unknown()
+	})])).min(1).optional(),
+	edges: z.array(z.record(z.string(), z.unknown())),
+	gates: z.array(z.unknown()).optional(),
+	budget: z.strictObject({
+		maxIterations: nonnegativeInteger,
+		maxTokens: nonnegativeInteger,
+		maxUsd: z.number().finite().nonnegative().optional(),
+		deadlineMs: nonnegativeInteger.optional(),
+		resources: z.record(z.string(), z.strictObject({
+			unit: z.string().min(1),
+			limit: nonnegativeInteger
+		})).optional()
+	}),
+	check: z.union([
+		equals.extend({ describe: z.string().optional() }),
+		oneOf.extend({ describe: z.string().optional() }),
+		exists.extend({ describe: z.string().optional() }),
+		z.strictObject({
+			describe: z.string().optional(),
+			all: z.array(match).min(1)
+		}),
+		z.strictObject({
+			describe: z.string().optional(),
+			command
+		})
+	]).optional(),
+	deliverable: z.strictObject({
+		describe: z.string().optional(),
+		checkRef: z.string().min(1),
+		command: command.optional(),
+		when: graphRouteWhenSchema.optional()
+	}).optional(),
+	on: z.unknown().optional()
+});
+/** Judge the flow's terminal-output map with RouteWhen's own JSON-pointer semantics. */
+function checkGraphRoute(when, output) {
+	return ("all" in when ? when.all : [when]).every((condition) => {
+		let document = output;
+		if (condition.node !== void 0) {
+			if (!output || typeof output !== "object" || !Object.hasOwn(output, condition.node)) return false;
+			document = output[condition.node];
+		}
+		const selected = resolveJsonPointer(document, condition.pointer);
+		if ("exists" in condition) return selected.found === condition.exists;
+		if (!selected.found) return false;
+		return "equals" in condition ? selected.value === condition.equals : condition.in.some((value) => value === selected.value);
+	});
+}
+// src/runtime/supervise/graph-parameters.ts
+const triggerPart = z.strictObject({ trigger: z.array(z.string()).min(1) });
+const literalPart = z.strictObject({ literal: z.string() });
+/** Explicit authored trigger slots in compiled graph data. An empty list marks fully bound data. */
+const graphTriggerBindingsSchema = z.array(z.strictObject({
+	path: z.array(z.union([z.string(), z.number().int().nonnegative()])).min(1),
+	mode: z.enum(["value", "text"]),
+	parts: z.array(z.union([literalPart, triggerPart])).min(1)
+}).superRefine((slot, context) => {
+	if (!slot.parts.some((part) => "trigger" in part) || slot.mode === "value" && (slot.parts.length !== 1 || !("trigger" in slot.parts[0]))) context.addIssue({
+		code: "custom",
+		message: "binding requires authored trigger parts; value slots require one trigger"
+	});
+}));
+function readBinding(namespace, keys, bindings) {
+	let found = bindings[namespace];
+	for (const key of keys) {
+		if (!found || typeof found !== "object" || !Object.hasOwn(found, key)) throw new ValidationError(`graph parameters: missing ${[namespace, ...keys].join(".")}`);
+		found = found[key];
+	}
+	if (found === void 0) throw new ValidationError(`graph parameters: missing ${[namespace, ...keys].join(".")}`);
+	return structuredClone(found);
+}
+function textValue(value, expression) {
+	if (value !== null && typeof value === "object") throw new ValidationError(`graph parameters: ${expression} needs a whole JSON slot`);
+	return String(value);
+}
+function pendingText(parts) {
+	return parts.map((part) => "literal" in part ? part.literal : `\${trigger.${part.trigger.join(".")}}`).join("");
+}
+/** Compile authored slots once. Inserted values are data, never recursively parsed templates. */
+function compileGraphParameters(value, bindings, options = {}) {
+	const visiting = /* @__PURE__ */ new Set();
+	const triggerBindings = [];
+	const bind = (item, path) => {
+		if (typeof item === "string") {
+			if (item.replace(/\$\{[^{}]+\}/g, "").includes("${")) throw new ValidationError("graph parameters: malformed reference");
+			const whole = /^\$\{([^{}]+)\}$/.exec(item);
+			const parts = [];
+			let cursor = 0;
+			let wholeValue;
+			let boundWhole = false;
+			for (const match of item.matchAll(/\$\{([^{}]+)\}/g)) {
+				if (match.index > cursor) parts.push({ literal: item.slice(cursor, match.index) });
+				const [namespace, ...keys] = match[1].split(".");
+				if (namespace !== "params" && namespace !== "trigger" || keys.length === 0) throw new ValidationError(`graph parameters: unsupported reference \${${match[1]}}`);
+				if (options.defer?.includes(namespace)) {
+					if (namespace === "trigger") parts.push({ trigger: keys });
+					else parts.push({ literal: match[0] });
+				} else {
+					const found = readBinding(namespace, keys, bindings);
+					if (whole) {
+						wholeValue = found;
+						boundWhole = true;
+					} else parts.push({ literal: textValue(found, match[1]) });
+				}
+				cursor = match.index + match[0].length;
+			}
+			if (boundWhole) return wholeValue;
+			if (cursor === 0) return item;
+			if (cursor < item.length) parts.push({ literal: item.slice(cursor) });
+			if (parts.some((part) => "trigger" in part)) triggerBindings.push({
+				path,
+				mode: whole ? "value" : "text",
+				parts
+			});
+			return pendingText(parts);
+		}
+		if (!item || typeof item !== "object") return item;
+		if (visiting.has(item)) throw new ValidationError("graph parameters: cyclic data is not JSON");
+		visiting.add(item);
+		const bound = Array.isArray(item) ? item.map((child, index) => bind(child, [...path, index])) : Object.fromEntries(Object.entries(item).map(([key, child]) => [key, bind(child, [...path, key])]));
+		visiting.delete(item);
+		return bound;
+	};
+	return {
+		value: bind(value, []),
+		triggerBindings
+	};
+}
+/** Legacy authored-data binding. Compiled graphs use bindCompiledGraphTriggers instead. */
+function bindGraphParameters(value, bindings, options = {}) {
+	return compileGraphParameters(value, bindings, options).value;
+}
+/** Check provenance against the exact provisional values without reading trigger data. */
+function assertGraphTriggerBindings(value, slots) {
+	const seen = /* @__PURE__ */ new Set();
+	for (const slot of graphTriggerBindingsSchema.parse(slots)) {
+		const key = JSON.stringify(slot.path.map(String));
+		if (seen.has(key)) throw new ValidationError("graph parameters: duplicate trigger binding path");
+		seen.add(key);
+		let found = value;
+		for (const key of slot.path) {
+			if (!found || typeof found !== "object" || !Object.hasOwn(found, key)) throw new ValidationError("graph parameters: trigger binding path does not exist");
+			found = found[key];
+		}
+		if (found !== pendingText(slot.parts)) throw new ValidationError("graph parameters: trigger binding does not match its provisional value");
+	}
+}
+/** Only explicitly recorded authored slots bind. Literal parameter/trigger values are untouched. */
+function bindCompiledGraphTriggers(value, slots, trigger) {
+	assertGraphTriggerBindings(value, slots);
+	const bound = structuredClone(value);
+	for (const slot of slots) {
+		let parent = bound;
+		for (const key of slot.path.slice(0, -1)) parent = parent[key];
+		parent[slot.path.at(-1)] = slot.mode === "value" ? readBinding("trigger", slot.parts[0].trigger, { trigger }) : slot.parts.map((part) => "literal" in part ? part.literal : textValue(readBinding("trigger", part.trigger, { trigger }), `trigger.${part.trigger.join(".")}`)).join("");
+	}
+	return bound;
+}
+// src/runtime/supervise/graph-registry.ts
 /**
 * `graph-registry` — the designer's memory: graphs and their outcomes as files.
 *
@@ -7453,11 +7697,18 @@ function digestOfGraph(graph) {
 	return storeGraph(graph).digest;
 }
 function storeGraph(graph) {
+	const { describe, checkRef, command, when } = graph.deliverable;
 	const content = {
 		nodes: graph.nodes,
 		edges: graph.edges,
 		budget: graph.budget,
-		deliverable: { ...graph.deliverable.describe ? { describe: graph.deliverable.describe } : {} },
+		...graph.triggerBindings === void 0 ? {} : { triggerBindings: graph.triggerBindings },
+		deliverable: {
+			...describe ? { describe } : {},
+			...checkRef ? { checkRef } : {},
+			...command ? { command } : {},
+			...when ? { when } : {}
+		},
 		...graph.entry === void 0 ? {} : { entry: graph.entry },
 		...graph.gates === void 0 ? {} : { gates: graph.gates }
 	};
@@ -7511,16 +7762,28 @@ async function recordGraphRun(reg, graph, record) {
 * Imported observations retain their source identity and never authorize replay.
 * A reader refreshing facts can preserve independently joined labels; an explicit
 * correction leaves preserveLabels unset and replaces the record. */
-async function recordStoredGraphRun(reg, stored, record, options = {}) {
-	assertRecord(record);
-	if (stored.observed && !record.source) throw new ValidationError("graph-registry: observed graphs require a source run identity");
-	if (!stored.observed && !record.finishedAt) throw new ValidationError("graph-registry: native graph runs require a completion timestamp");
-	if ((!stored.observed || record.traversals !== void 0) && (!Number.isSafeInteger(record.traversals) || record.traversals < 0)) throw new ValidationError("graph-registry: native graphs require metered traversals; observed counts must be non-negative integers");
-	const { digest, ...content } = stored;
-	if (graphDigest(content) !== digest) throw new ValidationError("graph-registry: stored graph content does not match its digest");
-	if (stored.digest !== record.graphDigest) throw new ValidationError(`graph-registry: record.graphDigest ${record.graphDigest} does not match the supplied graph (${stored.digest}) — record the graph that actually ran`);
+async function recordStoredGraphRun(reg, definition, record, options = {}) {
+	const { digest, ...content } = definition;
+	const stored = {
+		...content,
+		digest: digest ?? graphDigest(content)
+	};
+	if (stored.observed && !record) throw new ValidationError("graph-registry: observed graphs require a source run identity");
+	if (record) {
+		assertRecord(record);
+		if (stored.observed && !record.source) throw new ValidationError("graph-registry: observed graphs require a source run identity");
+		if (!stored.observed && !record.finishedAt) throw new ValidationError("graph-registry: native graph runs require a completion timestamp");
+		if ((!stored.observed || record.traversals !== void 0) && (!Number.isSafeInteger(record.traversals) || record.traversals < 0)) throw new ValidationError("graph-registry: native graphs require metered traversals; observed counts must be non-negative integers");
+		if (stored.digest !== record.graphDigest) throw new ValidationError(`graph-registry: record.graphDigest ${record.graphDigest} does not match the supplied graph (${stored.digest}) — record the graph that actually ran`);
+	}
+	if (graphDigest(content) !== stored.digest) throw new ValidationError("graph-registry: stored graph content does not match its digest");
 	await mkdir(join(reg.root, GRAPHS_DIR), { recursive: true });
-	return withJsonlFileLock(join(reg.root, RECORDS_FILE), async (canonicalPath) => {
+	const file = join(reg.root, RECORDS_FILE);
+	return withJsonlFileLock(file, async (canonicalPath) => {
+		if (!record) {
+			await persistGraph(reg, stored);
+			return stored;
+		}
 		let persisted = record;
 		if (options.preserveLabels && record.source) {
 			const prior = (await readCommittedJsonFile(canonicalPath)).find((row) => row.source?.kind === record.source.kind && row.source.id === record.source.id);
@@ -7548,18 +7811,21 @@ async function recordStoredGraphRun(reg, stored, record, options = {}) {
 			}
 		}
 		assertRecord(persisted);
-		const revisionPath = join(reg.root, GRAPHS_DIR, `${stored.digest}.json`);
-		try {
-			const { digest: existingDigest, ...existing } = JSON.parse(await readFile(revisionPath, "utf8"));
-			if (existingDigest !== stored.digest || graphDigest(existing) !== stored.digest) throw new ValidationError("graph-registry: stored graph revision is immutable but its content differs");
-		} catch (error) {
-			if (!isNoEntError(error)) throw error;
-			writeAtomicDurableFile(revisionPath, JSON.stringify(stored), { preserveMode: true });
-		}
+		await persistGraph(reg, stored);
 		await upsertCommittedJsonLine(canonicalPath, persisted, recordKey);
 		return stored;
 	});
 }
+async function persistGraph(reg, stored) {
+	const revisionPath = join(reg.root, GRAPHS_DIR, `${stored.digest}.json`);
+	try {
+		const { digest: existingDigest, ...existing } = JSON.parse(await readFile(revisionPath, "utf8"));
+		if (existingDigest !== stored.digest || graphDigest(existing) !== stored.digest) throw new ValidationError("graph-registry: stored graph revision is immutable but its content differs");
+	} catch (error) {
+		if (!isNoEntError(error)) throw error;
+		writeAtomicDurableFile(revisionPath, JSON.stringify(stored), { preserveMode: true });
+	}
+}
 /** All records, newest last. */
 async function listGraphRuns(reg) {
 	return readCommittedJsonFile(join(reg.root, RECORDS_FILE));
@@ -7698,20 +7964,33 @@ async function lookupGraph(reg, taskDigest) {
 		reason: records.length === 0 ? "first run for this task shape" : "no graph delivered for this task shape yet"
 	};
 }
-/** Rehydrate a stored graph into a runnable one. The check comes from the
-*  CALLER's environment (oracles are environment, never stored). */
-function graphFromStored(stored, check) {
+/** Rehydrate a stored graph, binding trigger data and an environment-owned named check. */
+function graphFromStored(stored, environment = {}) {
 	if (stored.observed) throw new ValidationError("graphFromStored: observed topology cannot be replayed");
+	const { digest: _digest, observed: _observed, triggerBindings: _triggerBindings, deliverable, ...topology } = stored.triggerBindings !== void 0 ? bindCompiledGraphTriggers(stored, stored.triggerBindings, typeof environment === "function" ? void 0 : environment.trigger ?? {}) : typeof environment === "function" ? stored : bindGraphParameters(stored, { trigger: environment.trigger ?? {} });
+	const selected = typeof environment === "function" ? environment : environment.checks && Object.hasOwn(environment.checks, deliverable.checkRef ?? "") ? environment.checks[deliverable.checkRef] : deliverable.checkRef === "command" ? deliverable.command : deliverable.checkRef === "route" && deliverable.when ? ((out, context) => context ? context.originalVerdict?.valid !== false : checkGraphRoute(deliverable.when, out)) : void 0;
+	if (!selected) throw new ValidationError(`graphFromStored: unknown checkRef ${deliverable.checkRef ?? "(missing)"}`);
+	const materialized = stored.triggerBindings === void 0 ? {} : { triggerBindings: [] };
+	if (typeof selected === "function") {
+		const { command: _command, ...description } = deliverable;
+		return {
+			...topology,
+			...materialized,
+			deliverable: {
+				...description,
+				check: selected
+			}
+		};
+	}
+	const command = selected === deliverable.command ? selected : bindGraphParameters(selected, { trigger: environment.trigger ?? {} });
 	return {
-		nodes: stored.nodes,
-		edges: stored.edges,
-		budget: stored.budget,
+		...topology,
+		...materialized,
 		deliverable: {
-			check,
-			...stored.deliverable.describe ? { describe: stored.deliverable.describe } : {}
-		},
-		...stored.entry === void 0 ? {} : { entry: stored.entry },
-		...stored.gates === void 0 ? {} : { gates: stored.gates }
+			...deliverable,
+			command,
+			check: () => false
+		}
 	};
 }
 /** Digests present on disk (integrity probe for tests and audits). */
@@ -7722,8 +8001,7 @@ async function storedGraphDigests(reg) {
 		return [];
 	}
 }
-//#endregion
-//#region src/runtime/supervise/supervise-graph-subtasks.ts
+// src/runtime/supervise/supervise-graph-subtasks.ts
 /** A stored graph's topology, from the registry `SuperviseOptions.graphRegistry` names. */
 async function storedGraphTopology(dir, digest) {
 	if (dir === void 0) throw new ValidationError("run_graph: this run names no graph registry (SuperviseOptions.graphRegistry), so a graphDigest cannot resolve; pass the graph as data");
@@ -7755,8 +8033,7 @@ async function graphSubtaskOutput(overlay, out, flowFailure) {
 		...exhaustedEdges.length === 0 ? {} : { exhaustedEdges }
 	};
 }
-//#endregion
-//#region src/runtime/supervise/recursive-worker-factory.ts
+// src/runtime/supervise/recursive-worker-factory.ts
 /** The factory that spawns the children of one parent seat, leaf or managed. */
 function recursiveWorkerFactoryFor(env, seat) {
 	const makeRecursiveWorker = (authoredProfile, spawnContext, recovering = false) => {
@@ -7810,7 +8087,7 @@ function managedWorker(env, seat, admitted, spawnContext) {
 		unassessedOutput: false
 	};
 	const deps = buildNestedManagerDeps(child);
-	return withModelSubstitution(driverChild(authorized, ownFlow === void 0 ? supervisorAgent(authorized, deps) : supervisorAgentWithTestBrain(authorized, {
+	const nested = ownFlow === void 0 ? supervisorAgent(authorized, deps) : supervisorAgentWithTestBrain(authorized, {
 		...deps,
 		brain: runtimeFlowBrain(),
 		routeFlow: ownFlow.route,
@@ -7819,7 +8096,8 @@ function managedWorker(env, seat, admitted, spawnContext) {
 			debounceMs: 0,
 			...options.wake
 		}
-	}), journal, childExecution.ref, () => child.acceptedSubmission, env.recoveryFactories.get(child.childFactory), () => child.unassessedOutput, admitted.seatManagedLeaf ? child.managerDeliverable : void 0, ownGraph ? (out) => graphSubtaskOutput(ownGraph, out, ownFlow?.run.failure) : void 0), admitted.modelSubstitution);
+	});
+	return withModelSubstitution(driverChild(authorized, nested, journal, childExecution.ref, () => child.acceptedSubmission, env.recoveryFactories.get(child.childFactory), () => child.unassessedOutput, admitted.seatManagedLeaf ? child.managerDeliverable : void 0, ownGraph ? (out) => graphSubtaskOutput(ownGraph, out, ownFlow?.run.failure) : void 0), admitted.modelSubstitution);
 }
 /**
 * The root of a `run_graph` subtask carries its graph's topology, and its subtree runs under that
@@ -7889,8 +8167,7 @@ function registerRecovery(env, makeRecursiveWorker) {
 	});
 	env.recoveryFactories.set(makeRecursiveWorker, factory);
 }
-//#endregion
-//#region src/runtime/supervise/worker-retry.ts
+// src/runtime/supervise/worker-retry.ts
 /**
 * WORKER-SPAWN RETRY — the second chance `driverRetry` gives the root, given to a leaf.
 *
@@ -8116,8 +8393,7 @@ function defaultSleep(ms, signal) {
 	if (ms <= 0 || signal?.aborted) return Promise.resolve();
 	return sleep(ms, signal);
 }
-//#endregion
-//#region src/runtime/supervise/supervise-recursive-workers.ts
+// src/runtime/supervise/supervise-recursive-workers.ts
 function createSuperviseWorkers(setup, cancelDurableRun) {
 	const { options, canonicalProfile, rootExecution, guidanceComposer, deliverable, analysts, journal, runId, rootOwnerId, now } = setup;
 	const recoveryFactories = /* @__PURE__ */ new WeakMap();
@@ -8192,8 +8468,7 @@ function createSuperviseWorkers(setup, cancelDurableRun) {
 		graphOverlays
 	};
 }
-//#endregion
-//#region src/runtime/supervise/supervise-registry.ts
+// src/runtime/supervise/supervise-registry.ts
 /** Resolve one option that may be given as a value OR as a name into `opts.registry`. Both failure
 *  modes name the option, the requested name, and the table it was looked up in — a typo must not
 *  degrade into a silently unconfigured run (which for `deliverable` means "no run can ever
@@ -8251,8 +8526,7 @@ async function verifyProfilePromotions(table) {
 	const { verifySealedExperiment } = await import("@tangle-network/agent-eval/experiment");
 	for (const [name, entry] of promoted) if (!await verifySealedExperiment(entry.promotion.experiment)) throw new ValidationError(`supervise: opts.registry.profiles ${JSON.stringify(name)} cites a sealed play whose digest does not match its spec`);
 }
-//#endregion
-//#region src/runtime/supervise/supervise-root-evidence.ts
+// src/runtime/supervise/supervise-root-evidence.ts
 /**
 * Record what a run-scoped cancel actually did, at the ONE place that observes the run's terminal
 * state: the `supervise()` settle path.
@@ -8326,8 +8600,7 @@ function rootProviderModelEvidence(observations) {
 function rootProviderModelEvidenceFromExecution(evidence) {
 	return evidence ?? rootProviderModelEvidence([]);
 }
-//#endregion
-//#region src/runtime/supervise/supervise-root-profile.ts
+// src/runtime/supervise/supervise-root-profile.ts
 /**
 * The composer `profileGuidance` selects, or `undefined` when no guidance is selected. The result
 * is re-validated as an AgentProfile, and a composition that breaks the schema is refused as a
@@ -8408,8 +8681,7 @@ function rootSpawnResourceRoot(backend) {
 	}
 	return isLoopbackHost(host) ? resolve(backend.cwd) : void 0;
 }
-//#endregion
-//#region src/runtime/supervise/driver-execution-attempt.ts
+// src/runtime/supervise/driver-execution-attempt.ts
 /** The failure a terminal artifact reports, as the error a failed harness turn raises. */
 function harnessTurnFailure(runtime, artifact) {
 	const reported = executorFailure(artifact);
@@ -8740,8 +9012,7 @@ var DriverExecutionAttempt = class {
 		});
 	}
 };
-//#endregion
-//#region src/runtime/supervise/manager-drive-session.ts
+// src/runtime/supervise/manager-drive-session.ts
 /** The profile the provider sees for `profile`, run on `seat` when one is active. */
 function seatProviderProfile(profile, seat) {
 	return providerVisibleProfile(seat ? seatExecutionProfile(profile, seat.stage) : profile);
@@ -8902,20 +9173,19 @@ var ManagerDriveSession = class {
 				at: new Date(now()).toISOString()
 			});
 			await seatSelection.onPause(scope.view.root, error.resumeAt, "paused");
-			await sleepScopeWait(scope, Math.max(1e3, Date.parse(error.resumeAt) - now()), scope.signal, "seat-wait");
+			const waitMs = Math.max(1e3, Date.parse(error.resumeAt) - now());
+			await sleepScopeWait(scope, waitMs, scope.signal, "seat-wait");
 			afterRecheck = true;
 		}
 	}
 };
-//#endregion
-//#region src/mcp/tools/coordination-request-context.ts
+// src/mcp/tools/coordination-request-context.ts
 /** The tool-call timeout Runtime asks harnesses to give its coordination server. The Tangle
 *  profile materializer writes it as `MCP_TOOL_TIMEOUT` (Claude Code) and `tool_timeout_sec`
 *  (Codex) when an attachment declares `metadata.toolTimeoutMs`, so a fenced coordination call
 *  that holds its response for its whole fence is never cut off at the 60 s harness default. */
 const COORDINATION_CLIENT_TOOL_TIMEOUT_MS = 3e5;
-//#endregion
-//#region src/runtime/supervise/supervise-driver-attempt.ts
+// src/runtime/supervise/supervise-driver-attempt.ts
 async function executeDriverAttempt(input) {
 	const { state, scope, retainedOwner, turnCap } = input;
 	if (!(scope.view.inFlight > 0)) assertDriverBudgetOpen(scope, input.now);
@@ -9070,8 +9340,7 @@ async function providerAttemptFactory(input, providerHarness) {
 		}
 	});
 }
-//#endregion
-//#region src/runtime/supervise/supervise-driver-session.ts
+// src/runtime/supervise/supervise-driver-session.ts
 /** Run a harness-brained manager through the same executor factory as its children. The manager's
 * full profile is preserved, the live coordination server is added under one reserved alias, and
 * every streamed turn is charged to the manager's scope before it may continue. */
@@ -9229,8 +9498,7 @@ async function reentryContinuity(backend, scope, retainedOwner) {
 	}
 	return UNPROVEN_CONTINUITY;
 }
-//#endregion
-//#region src/runtime/supervise/supervise-manager-harness.ts
+// src/runtime/supervise/supervise-manager-harness.ts
 /**
 * Resolve the harness that drives each manager owner: the caller's resolver or harness, claimed
 * per owner so one steerable harness never serves two managers, or one built from the backend.
@@ -9301,8 +9569,7 @@ function driveHarnessClaims() {
 		return harness;
 	};
 }
-//#endregion
-//#region src/runtime/supervise/supervise-spawn-preflight.ts
+// src/runtime/supervise/supervise-spawn-preflight.ts
 /**
 * The pre-flight `supervise` installs for a bridge backend. No new knob: the backend already says
 * where the bridge is, and these are the questions only the bridge can answer.
@@ -9412,8 +9679,7 @@ function composeSpawnPreflights(...preflights) {
 		}
 	};
 }
-//#endregion
-//#region src/runtime/supervise/supervise-sql-admission.ts
+// src/runtime/supervise/supervise-sql-admission.ts
 /** What a SQL run context admits, in two phases: identity and worker seam before any compute (a
 *  synchronous configuration fault), then coordinator and retained-control capabilities at start. */
 function assertSqlRunOptions(options) {
@@ -9429,8 +9695,7 @@ async function assertSqlRunProvider(options) {
 	const capabilities = await provider.capabilities();
 	if (!capabilities.retainedControl || !capabilities.streaming.turnIdempotency || !capabilities.streaming.replay || !provider.get) throw new ValidationError("supervise: SQL runContext requires retainedControl, replay, turn idempotency, and provider.get");
 }
-//#endregion
-//#region src/runtime/supervise/supervise-run-setup.ts
+// src/runtime/supervise/supervise-run-setup.ts
 function prepareSuperviseRun(profile, task, opts, testBrain) {
 	const options = captureSuperviseOptions(opts);
 	assertSqlRunOptions(options);
@@ -9616,7 +9881,10 @@ function resolveRunRegistry(options) {
 		analysts: resolveNamed("analysts", "analysts", options.analysts, options.registry?.analysts),
 		profileTable: snapshotProfileTable(options.registry?.profiles, options.allowedModels, options.makeWorkerAgent === void 0 && options.authorizeSpawn === void 0 ? (entry, context) => {
 			const security = validateAgentProfileSecurity(entry, options.profileSecurity ?? DEFAULT_AUTHORED_PROFILE_SECURITY_POLICY);
-			if (!security.ok) throw new ValidationError(`${context}: ${security.issues.filter((issue) => issue.level === "error").map((issue) => `${issue.code}${issue.path ? ` at ${issue.path}` : ""}`).join(", ")}`);
+			if (!security.ok) {
+				const details = security.issues.filter((issue) => issue.level === "error").map((issue) => `${issue.code}${issue.path ? ` at ${issue.path}` : ""}`).join(", ");
+				throw new ValidationError(`${context}: ${details}`);
+			}
 			if (options.backend !== void 0 && options.makeLeafAgent === void 0 && declaredRuntimeToolNames(entry).length === 0) assertBackendProfileMaterialization(entry, options.backend, context);
 		} : void 0)
 	};
@@ -9683,8 +9951,7 @@ function spawnProfileComposer(options, driver, childrenCanSubmit, composeSpawnPr
 		};
 	};
 }
-//#endregion
-//#region src/runtime/supervise/supervise-run-lifecycle.ts
+// src/runtime/supervise/supervise-run-lifecycle.ts
 function superviseInternal(profile, task, opts, testBrain) {
 	const setup = prepareSuperviseRun(profile, task, opts, testBrain);
 	const { options } = setup;
@@ -9910,8 +10177,7 @@ async function settleSupervisedRun(run, pending, cancellation) {
 		...rootExecution.ref === void 0 ? {} : { execution: rootExecution.ref }
 	};
 }
-//#endregion
-//#region src/runtime/supervise/supervise.ts
+// src/runtime/supervise/supervise.ts
 /** Capabilities a data-only consumer may require before building an opted-in run. `graphTools`:
 *  a manager whose profile grants `run_graph` can start an agent graph as one subtask. */
 const superviseFleetCapabilities = Object.freeze({
@@ -9942,7 +10208,6 @@ function superviseWithContext(profile, task, opts, brain) {
 		...signal === void 0 ? {} : { signal }
 	}, brain));
 }
-//#endregion
-export { allWorkersStalled as $, serveCoordinationMcp as A, validateFlowGraph as B, storedGraphDigests as C, supervisorAgentWithTestBrain as D, supervisorAgent as E, GraphRouteError as F, createPromptRegistry as G, graphRootProfile as H, createFlowRun as I, dumbContinuationPassPrompt as J, delegatesWorkerBriefPrompt as K, flowRootProfile as L, runBrainLoop as M, runtimeFlowBrain as N, UNPROVEN_CONTINUITY as O, createGraphOverlay as P, promptHandle as Q, journaledGateDecider as R, recordStoredGraphRun as S, workerFromBackend as T, validateGraphTopology as U, defaultEdgeTraversalCap as V, analyzesFindingsReportPrompt as W, kernelPromptRegistry as X, formatPromptHandle as Y, naiveContinuationPrompt as Z, listGraphRuns as _, superviseRootProfile as a, bestSoFar as at, pickBestGraph as b, retryPreSpawnRefusals as c, readRootStream as ct, graphCorpusSummary as d, anyOf as et, graphDigest as f, graph_registry_exports as g, graphRunsFor as h, profileGuidanceComposer as i, areaUnderCurve as it, driverAgent as j, composeReentryTask as k, withWorkerSpawnRetry as l, readRootStreamReceipt as lt, graphRegistry as m, superviseFleetCapabilities as n, plateau as nt, isPreSpawnExecutorFailure as o, plateauLength as ot, graphFromStored as p, dumbContinuationFailPrompt as q, superviseWithTestBrain as r, anytimeReport as rt, resolveWorkerSpawnRetry as s, renderAnytimeTable as st, supervise as t, noProgressFor as tt, digestOfGraph as u, createSupervisorSpanRecorder as ut, loadGraph as v, taskShapeDigest as w, recordGraphRun as x, lookupGraph as y, routeFlowOf as z };
+export { delegatesWorkerBriefPrompt as $, graphRouteWhenSchema as A, runtimeFlowBrain as B, storedGraphDigests as C, compileGraphParameters as D, bindGraphParameters as E, composeReentryTask as F, journaledGateDecider as G, GraphRouteError as H, serveCoordinationMcp as I, defaultEdgeTraversalCap as J, routeFlowOf as K, coordinationControlToolNames as L, supervisorAgent as M, supervisorAgentWithTestBrain as N, graphTriggerBindingsSchema as O, UNPROVEN_CONTINUITY as P, createPromptRegistry as Q, driverAgent as R, recordStoredGraphRun as S, assertGraphTriggerBindings as T, createFlowRun as U, createGraphOverlay as V, flowRootProfile as W, validateGraphTopology as X, graphRootProfile as Y, analyzesFindingsReportPrompt as Z, listGraphRuns as _, createSupervisorSpanRecorder as _t, superviseRootProfile as a, promptHandle as at, pickBestGraph as b, retryPreSpawnRefusals as c, noProgressFor as ct, graphCorpusSummary as d, areaUnderCurve as dt, dumbContinuationFailPrompt as et, graphDigest as f, bestSoFar as ft, graph_registry_exports as g, readRootStreamReceipt as gt, graphRunsFor as h, readRootStream as ht, profileGuidanceComposer as i, naiveContinuationPrompt as it, workerFromBackend as j, graphFileSchema as k, withWorkerSpawnRetry as l, plateau as lt, graphRegistry as m, renderAnytimeTable as mt, superviseFleetCapabilities as n, formatPromptHandle as nt, isPreSpawnExecutorFailure as o, allWorkersStalled as ot, graphFromStored as p, plateauLength as pt, validateFlowGraph as q, superviseWithTestBrain as r, kernelPromptRegistry as rt, resolveWorkerSpawnRetry as s, anyOf as st, supervise as t, dumbContinuationPassPrompt as tt, digestOfGraph as u, anytimeReport as ut, loadGraph as v, taskShapeDigest as w, recordGraphRun as x, lookupGraph as y, runBrainLoop as z };
 
-//# sourceMappingURL=supervise-BGfm2GlY.js.map
+//# sourceMappingURL=supervise-CNNhX0ab.js.map