@tangle-network/agent-runtime 0.352.1 → 0.353.3

package/dist/{supervisor-rK5Y8en6.js → supervisor-C3JhrVVU.js}

@@ -5,6 +5,8 @@ import { runTaskQueue } from "./task-queue.js";
 import { _ as agentHarness, a as concreteProfileModel, c as profileModelExecutionSettings, d as assertRouterAutoDeclaration, f as assertRouterAutoResponse, g as observedModelMatchesDeclared, h as observedModelHasSnapshot, l as profileProviderModel, m as mergeObservedModelIdentity, o as enforceTokenLimits, s as profileBridgeWireModel, t as assertExecutableAgentProfile, u as resolveRouterRetryPolicy } from "./model-policy-C-RGAUW4.js";
 import { B as sha256Bytes$1, H as hasControlCharacter, I as deepFreezeCandidate, M as verifyWorkspaceSnapshotArtifacts, U as nativeSystemPrompt, c as verifyAgentCandidateWorkspaceTree, g as verifiedArtifactChunks, o as readAgentCandidateWorkspaceArtifactFiles, s as verifyAgentCandidateWorkspaceArtifacts, t as assertSandboxProfileCompatibility, v as verifyAgentCandidateWorkspaceArchive } from "./sandbox-profile-compat-CXjozdWL.js";
 import { i as notifyRuntimeHookEvent } from "./runtime-hooks-CsW2pfFk.js";
+import * as traceContract from "@tangle-network/agent-trace-contract";
+import { ATTR, OPERATION_NAME_ATTR, toW3CSpanId, toW3CTraceId } from "@tangle-network/agent-trace-contract";
 import { AGENT_PROFILE_MATERIALIZATION_AXES, AgentEnvironmentCapabilitiesSchema, AgentExactRunControlRefSchema, AgentInteractiveSessionControlClaimAcknowledgementSchema, AgentInteractiveSessionControlClaimSchema, AgentInteractiveSessionPromptAcknowledgementSchema, AgentInteractiveSessionRefSchema, AgentInteractiveSessionStatusSchema, AgentInteractiveSessionStopAcknowledgementSchema, AgentNativeContextContinuationResultSchema, AgentRunCancellationAcknowledgementSchema, AgentRunCancellationRequestSchema, AgentTurnInputSchema, AgentTurnResultSchema, ContextTransferReceiptSchema, ContextTransferRequestSchema, InteractionAcknowledgementSchema, InteractionResponseCommandSchema, NativeContextBoundaryProofSchema, NativeContextContinuationRequestSchema, REASONING_EFFORTS, RuntimeEventEnvelopeSchema, TerminalReplayWindowSchema, TerminalSessionRefSchema, agentCandidateArtifactRefSchema, agentCandidateWorkspaceManifestMaterialSchema, agentCandidateWorkspaceSnapshotEvidenceSchema, agentInteractiveSessionControlClaimAcknowledgementMatchesRequest, agentInteractiveSessionControlClaimMatchesRef, agentInteractiveSessionPromptAcknowledgementMatchesCommand, agentInteractiveSessionRefMatchesStart, agentInteractiveSessionRunRef, agentInteractiveSessionStatusMatchesRef, agentInteractiveSessionStopAcknowledgementMatchesCommand, agentNativeContextContinuationResultMatchesRequest, agentProfileSchema, agentRunCancellationAcknowledgementMatchesRequest, agentRunCancellationRequestDigest, agentWorkspaceSnapshotRefDigest, canonicalAgentProfileDigest, canonicalCandidateDigest, canonicalWorkspaceCwd, contextTransferReceiptMatches, exactAgentInteractiveSessionStart, harnessTypeSchema, nativeContextContinuationTurnDigest, nativeReasoningControl, profileMaterializationAxes, profileMaterializationAxes as profileMaterializationAxes$1, renderInputPartsAsText, sha256DigestSchema, workspaceCheckpointRequestDigest, workspaceCheckpointResultMatchesRequest, workspaceCleanupAcknowledgementMatches, workspaceCleanupRequestDigest, workspaceForkRequestDigest, workspaceForkResultMatchesRequest } from "@tangle-network/agent-interface";
 import { isToolSpan, toolSpansToTraceAnalysisStore } from "@tangle-network/agent-eval";
 import { createAgentRunOutcomeTracker } from "@tangle-network/sandbox/runtime";
@@ -23,7 +25,7 @@ import { request } from "node:http";
 import { request as request$1 } from "node:https";
 import { Readable } from "node:stream";
 import { AsyncLocalStorage } from "node:async_hooks";
-import { ATTR, deriveHexId, isW3CSpanId, isW3CTraceId } from "@tangle-network/agent-trace-contract";
+import { decodeOtlpAttributes, msToUnixNano, otlpTraceExport, readOtlpPartialSuccess, toOtlpAttributes } from "@tangle-network/agent-trace-contract/otlp";
 import { clearImmediate, setImmediate } from "node:timers";
 // src/runtime/turn-input.ts
 /**
@@ -355,27 +357,37 @@ function readSandboxOutcome(value) {
 	if (!outcome || typeof outcome !== "object") return void 0;
 	return outcome;
 }
+// src/runtime/supervise/flow-brain.ts
+const flowOwners = /* @__PURE__ */ new WeakSet();
+/** Runtime schedules this model-free brain under graph edge caps, pool, deadline and abort. */
+function runtimeFlowBrain() {
+	const brain = async () => ({
+		content: null,
+		toolCalls: []
+	});
+	flowOwners.add(brain);
+	return brain;
+}
+/** True only for a brain `runtimeFlowBrain` minted. */
+function isRuntimeFlowBrain(brain) {
+	return flowOwners.has(brain);
+}
+/** Carry the same unforgeable ownership through the built code driver and its spec copies. */
+function runtimeFlowAgent(agent, brain) {
+	if (brain && isRuntimeFlowBrain(brain)) flowOwners.add(agent);
+	return agent;
+}
+function isRuntimeFlowAgent(agent) {
+	return typeof agent === "object" && agent !== null && flowOwners.has(agent);
+}
 // src/runtime/supervise/executable-spec.ts
-/**
-* Parse one untrusted profile into the exact immutable value execution may consume.
-*
-* Snapshotting before schema parsing reads caller-owned fields once. Snapshotting the parsed
-* result prevents downstream custom code from changing any identity or authority field.
-*/
+/** Read untrusted fields once, then parse and seal the exact executable profile. */
 function executableAgentProfileSnapshot(raw, context) {
 	const profile = authoredAgentProfileSnapshot(raw, context);
 	assertExecutableAgentProfile(profile, context);
 	return profile;
 }
-/**
-* Parse and seal a profile as authored, without requiring it to select a harness and model.
-*
-* This is the intake for a leaf whose behavior is code the caller already built: a verbatim
-* `AgentSpec.executor`. Such an executor receives only the task and a signal, so no registry,
-* harness, or backend reads the profile after intake, and there is no ambient fill to refuse. The
-* profile still parses and still digests into the node's identity; it is simply not obliged to
-* claim a model that nothing runs. A graph script node is the canonical case.
-*/
+/** Seal code-owned behavior without inventing a model: verbatim executors and owned flow drivers. */
 function authoredAgentProfileSnapshot(raw, context) {
 	const input = detachedSnapshot(raw, `${context}: AgentProfile input`);
 	const profile = agentProfileSchema.parse(input);
@@ -384,7 +396,7 @@ function authoredAgentProfileSnapshot(raw, context) {
 /** Snapshot an executable spec while retaining trusted callbacks by reference. */
 function executableAgentSpecSnapshot(raw, context) {
 	const { profile: rawProfile, harness, execution: rawExecution, ...runtimeExtensions } = raw;
-	const profile = raw.executor === void 0 ? executableAgentProfileSnapshot(rawProfile, context) : authoredAgentProfileSnapshot(rawProfile, context);
+	const profile = raw.executor === void 0 && !isRuntimeFlowAgent(runtimeExtensions.driver) ? executableAgentProfileSnapshot(rawProfile, context) : authoredAgentProfileSnapshot(rawProfile, context);
 	const execution = rawExecution === void 0 ? void 0 : detachedSnapshot(rawExecution, `${context}: execution attribution`);
 	return Object.freeze({
 		...runtimeExtensions,
@@ -1181,6 +1193,7 @@ const CODEX_REPRODUCIBLE_ARGS = [
 	"--strict-config"
 ];
 const CODEX_PERMISSION_PROFILE = "agent_runtime_reproducible";
+// src/mcp/local-harness-invocation.ts
 /**
 * Default per-harness command + arg shape. `buildArgs` takes ONLY the task prompt and
 * emits the prompt-only invocation (no model, no system prompt) — the safe default shape
@@ -1199,16 +1212,7 @@ const HARNESS_INVOCATIONS = {
 		command: "claude",
 		buildArgs: (taskPrompt) => ["-p", taskPrompt],
 		modelArgs: (model) => ["--model", model],
-		reasoning: {
-			levels: {
-				low: "low",
-				medium: "medium",
-				high: "high",
-				xhigh: "xhigh",
-				ultracode: "max"
-			},
-			args: (level) => ["--effort", level]
-		},
+		reasoningArgs: (level) => ["--effort", level],
 		permissionBypassArgs: () => ["--dangerously-skip-permissions"],
 		profileMcp: true
 	},
@@ -1216,18 +1220,7 @@ const HARNESS_INVOCATIONS = {
 		command: "codex",
 		buildArgs: (taskPrompt) => ["exec", taskPrompt],
 		modelArgs: (model) => ["-m", model],
-		reasoning: {
-			levels: {
-				none: "none",
-				minimal: "minimal",
-				low: "low",
-				medium: "medium",
-				high: "high",
-				xhigh: "xhigh",
-				ultracode: "xhigh"
-			},
-			args: (level) => ["-c", `model_reasoning_effort="${level}"`]
-		},
+		reasoningArgs: (level) => ["-c", `model_reasoning_effort="${level}"`],
 		permissionBypassArgs: () => [
 			"--sandbox",
 			"workspace-write",
@@ -1241,17 +1234,7 @@ const HARNESS_INVOCATIONS = {
 		command: "opencode",
 		buildArgs: (taskPrompt) => ["run", taskPrompt],
 		modelArgs: (model) => ["-m", model],
-		reasoning: {
-			levels: {
-				minimal: "minimal",
-				low: "low",
-				medium: "medium",
-				high: "high",
-				xhigh: "xhigh",
-				ultracode: "max"
-			},
-			args: (level) => ["--variant", level]
-		},
+		reasoningArgs: (level) => ["--variant", level],
 		permissionBypassArgs: () => ["--auto"],
 		profileMcp: true
 	},
@@ -1259,17 +1242,7 @@ const HARNESS_INVOCATIONS = {
 		command: "pi",
 		buildArgs: (taskPrompt) => ["--print", taskPrompt],
 		modelArgs: (model) => ["--model", model],
-		reasoning: {
-			levels: {
-				minimal: "minimal",
-				low: "low",
-				medium: "medium",
-				high: "high",
-				xhigh: "xhigh",
-				ultracode: "max"
-			},
-			args: (level) => ["--thinking", level]
-		},
+		reasoningArgs: (level) => ["--thinking", level],
 		permissionBypassArgs: () => ["--approve"],
 		profileMcp: true
 	},
@@ -1286,10 +1259,11 @@ const LOCAL_HARNESSES = Object.keys(HARNESS_INVOCATIONS);
 /**
 * Whether the harness's native control can express this reasoning effort. Admission checks read
 * this so a profile the invocation would later refuse is rejected BEFORE any workspace state is
-* created, against the same table that emits the argv.
+* created, against the same table that emits the argv. Every harness with a native control
+* expresses every rung through agent-interface's `nativeReasoningControl`.
 */
-function harnessSupportsReasoningEffort(harness, reasoningEffort) {
-	return HARNESS_INVOCATIONS[harness].reasoning?.levels[reasoningEffort] !== void 0;
+function harnessSupportsReasoningEffort(harness, _reasoningEffort) {
+	return HARNESS_INVOCATIONS[harness].reasoningArgs !== void 0;
 }
 /**
 * Whether a profile's MCP servers reach this harness on the local-harness path — the row's
@@ -1300,11 +1274,13 @@ function harnessSupportsReasoningEffort(harness, reasoningEffort) {
 function harnessMaterializesProfileMcp(harness) {
 	return HARNESS_INVOCATIONS[harness].profileMcp === true;
 }
-function harnessReasoningArgs(harness, reasoningEffort) {
-	const reasoning = HARNESS_INVOCATIONS[harness].reasoning;
-	const level = reasoning?.levels[reasoningEffort];
-	if (reasoning === void 0 || level === void 0) throw new Error(`harnessInvocation: ${harness} cannot express reasoning effort ${String(reasoningEffort)}`);
-	return reasoning.args(level);
+/** The argv for a profile effort; `null` from agent-interface means the CLI takes no flag
+*  for that rung (opencode `none`). */
+function harnessReasoningArgs(harness, reasoningEffort, model) {
+	const reasoningArgs = HARNESS_INVOCATIONS[harness].reasoningArgs;
+	if (reasoningArgs === void 0) throw new Error(`harnessInvocation: ${harness} cannot express reasoning effort ${String(reasoningEffort)}`);
+	const level = nativeReasoningControl(harness, reasoningEffort, model);
+	return level === null ? [] : reasoningArgs(level);
 }
 function buildHarnessArgs(harness, taskPrompt, options = {}) {
 	const invocation = HARNESS_INVOCATIONS[harness];
@@ -1334,7 +1310,7 @@ function harnessInvocation(harness, profile, taskPrompt, options = {}) {
 	const model = harnessProfileModel(harness, profile);
 	if (model) args.push(...invocation.modelArgs(model));
 	const reasoningEffort = profile.model?.reasoningEffort;
-	if (reasoningEffort !== void 0) args.push(...harnessReasoningArgs(harness, reasoningEffort));
+	if (reasoningEffort !== void 0) args.push(...harnessReasoningArgs(harness, reasoningEffort, model));
 	return {
 		command: invocation.command,
 		args,
@@ -1578,7 +1554,7 @@ function assertCodexReproducibleInvocation(command, args) {
 	const hasExactPrefix = expectedPrefix.every((arg, index) => args[index] === arg);
 	const tail = args.slice(expectedPrefix.length);
 	const validModel = tail[0] === "-m" && typeof tail[1] === "string" && tail[1].length > 0 && !tail[1].startsWith("-");
-	const validReasoning = tail[2] === "-c" && typeof tail[3] === "string" && /^model_reasoning_effort="(?:none|minimal|low|medium|high|xhigh)"$/.test(tail[3]);
+	const validReasoning = tail[2] === "-c" && typeof tail[3] === "string" && /^model_reasoning_effort="(?:none|minimal|low|medium|high|xhigh|ultra)"$/.test(tail[3]);
 	const nativeKeys = /* @__PURE__ */ new Set();
 	const nativeArgs = tail.slice(4);
 	let validNative = nativeArgs.length % 2 === 0;
@@ -8438,28 +8414,11 @@ function createRuntimeStreamEventCollector(options = {}) {
 * The exporter accepts both raw OtelSpan objects and LoopTraceEvents
 * (which get converted to OTLP spans automatically).
 */
-/** OTel GenAI: the tool definitions offered to the model. Matches the constant agent-eval and
-*  traces each define locally for the same external convention (there is no shared semconv
-*  package to import it from). */
-const TOOL_DEFINITIONS_ATTR = "gen_ai.tool.definitions";
 const SCOPE = {
 	name: "@tangle-network/agent-runtime",
 	version: "0.83.0"
 };
 /**
-* Current (non-deprecated) OpenTelemetry GenAI semantic-convention keys.
-* Registry: https://opentelemetry.io/docs/specs/semconv/registry/attributes/gen-ai/
-* NB: `gen_ai.system` / `gen_ai.usage.prompt_tokens` / `completion_tokens` are
-* DEPRECATED — do not emit them. We use `provider.name` + `input/output_tokens`.
-*/
-const GEN_AI = {
-	operation: "gen_ai.operation.name",
-	agentName: "gen_ai.agent.name",
-	conversationId: "gen_ai.conversation.id",
-	inputTokens: "gen_ai.usage.input_tokens",
-	outputTokens: "gen_ai.usage.output_tokens"
-};
-/**
 * Create an exporter that APPENDS spans to a local OpenInference-JSONL file, one complete span per
 * line, instead of posting them to a collector.
 *
@@ -8517,18 +8476,9 @@ function nanosToIso(nanos) {
 	const ms = Number(BigInt(nanos) / 1000000n);
 	return new Date(ms).toISOString();
 }
-/** OTLP's key/value attribute array -> the plain object OpenInference carries. */
-function attributesToObject(attributes) {
-	const out = {};
-	for (const a of attributes ?? []) {
-		const v = a.value;
-		out[a.key] = v.stringValue ?? (v.intValue !== void 0 ? Number(v.intValue) : void 0) ?? v.doubleValue ?? v.boolValue;
-	}
-	return out;
-}
 /** One `OtelSpan` as the OpenInference JSONL line `traces` and other OpenInference tools read. */
 function toOpenInferenceLine(span) {
-	const attributes = attributesToObject(span.attributes);
+	const { attributes } = decodeOtlpAttributes(span.attributes);
 	const kind = attributes["openinference.span.kind"];
 	const resource = {};
 	for (const key of ["service.name", "agent.name"]) if (attributes[key] !== void 0) resource[key] = attributes[key];
@@ -8570,10 +8520,10 @@ function createOtelExporter(config) {
 	const flushIntervalMs = config?.flushIntervalMs ?? 5e3;
 	const maxQueueSize = Math.max(positiveInteger$1(config?.maxQueueSize, 2048), batchSize);
 	const timeoutMs = positiveInteger$1(config?.timeoutMs, 1e4);
-	const resource = { attributes: toOtelAttributes({
+	const resource = toOtlpAttributes({
 		"service.name": config?.serviceName ?? "agent-runtime",
 		...config?.resourceAttributes ?? {}
-	}) };
+	});
 	const queue = [];
 	let inFlight = 0;
 	let written = 0;
@@ -8587,13 +8537,7 @@ function createOtelExporter(config) {
 		lastError = reason;
 	};
 	async function send(batch) {
-		const body = { resourceSpans: [{
-			resource,
-			scopeSpans: [{
-				scope: SCOPE,
-				spans: batch
-			}]
-		}] };
+		const body = otlpTraceExport(resource, SCOPE, batch);
 		try {
 			const response = await fetch(url, {
 				method: "POST",
@@ -8610,9 +8554,10 @@ function createOtelExporter(config) {
 				drop(batch.length, `HTTP ${response.status} from ${url}${detail}`);
 				return;
 			}
-			const rejected = rejectedSpans(text, batch.length);
-			if (rejected.count > 0) drop(rejected.count, `collector rejected ${rejected.count} spans: ${rejected.message}`);
-			written += batch.length - rejected.count;
+			const partial = readOtlpPartialSuccess(text);
+			const rejected = Math.min(partial.rejectedSpans, batch.length);
+			if (rejected > 0) drop(rejected, `collector rejected ${rejected} spans: ${partial.errorMessage ?? "no message"}`);
+			written += batch.length - rejected;
 		} catch (error) {
 			drop(batch.length, `POST ${url} failed: ${describeFetchError(error)}`);
 		}
@@ -8672,45 +8617,6 @@ function createOtelExporter(config) {
 		}
 	};
 }
-/**
-* Spans a 2xx OTLP/HTTP response still refused. The spec lets a collector accept a request and
-* reject part of it through `partialSuccess.rejectedSpans`; reading only the status would count
-* those spans as delivered. An empty or non-JSON body is a full success.
-*/
-function rejectedSpans(text, batchLength) {
-	if (!text.trim()) return {
-		count: 0,
-		message: ""
-	};
-	let parsed;
-	try {
-		parsed = JSON.parse(text);
-	} catch {
-		return {
-			count: 0,
-			message: ""
-		};
-	}
-	if (parsed === null || typeof parsed !== "object") return {
-		count: 0,
-		message: ""
-	};
-	const partial = parsed.partialSuccess;
-	if (partial === null || typeof partial !== "object") return {
-		count: 0,
-		message: ""
-	};
-	const { rejectedSpans: raw, errorMessage } = partial;
-	const count = typeof raw === "string" ? Number(raw) : typeof raw === "number" ? raw : 0;
-	if (!Number.isSafeInteger(count) || count <= 0) return {
-		count: 0,
-		message: ""
-	};
-	return {
-		count: Math.min(count, batchLength),
-		message: typeof errorMessage === "string" && errorMessage ? errorMessage : "no message"
-	};
-}
 /** Node's fetch reports every socket failure as "fetch failed"; the cause names which one. */
 function describeFetchError(error) {
 	if (!(error instanceof Error)) return String(error);
@@ -8733,14 +8639,14 @@ function loopEventToOtelSpan(event, traceId, parentSpanId) {
 	for (const [k, v] of Object.entries(event.payload)) if (typeof v === "string" || typeof v === "number" || typeof v === "boolean") attrs[`loop.${k}`] = v;
 	const ts = msToNs(event.timestamp);
 	return {
-		traceId: padTraceId(traceId),
+		traceId: toW3CTraceId(traceId),
 		spanId,
-		parentSpanId: parentSpanId ? padSpanId(parentSpanId) : void 0,
+		parentSpanId: parentSpanId ? toW3CSpanId(parentSpanId) : void 0,
 		name: event.kind,
 		kind: 1,
 		startTimeUnixNano: ts,
 		endTimeUnixNano: ts,
-		attributes: toOtelAttributes(attrs),
+		attributes: toOtlpAttributes(attrs),
 		status: { code: 1 }
 	};
 }
@@ -8756,14 +8662,14 @@ function flatOtelSpan(name, attributes, traceId, timestampMs, parentSpanId, endT
 	const start = msToNs(timestampMs);
 	const end = msToNs(Math.max(timestampMs, endTimestampMs));
 	return {
-		traceId: padTraceId(traceId),
+		traceId: toW3CTraceId(traceId),
 		spanId: generateSpanId(),
-		parentSpanId: parentSpanId ? padSpanId(parentSpanId) : void 0,
+		parentSpanId: parentSpanId ? toW3CSpanId(parentSpanId) : void 0,
 		name,
 		kind: 1,
 		startTimeUnixNano: start,
 		endTimeUnixNano: end,
-		attributes: toOtelAttributes(attributes),
+		attributes: toOtlpAttributes(attributes),
 		status: { code: 1 }
 	};
 }
@@ -8820,7 +8726,7 @@ function buildRuntimeEventOtelSpans(events, traceId, parentSpanId, options = {})
 			if (event.costUsd !== void 0) attrs["tangle.cost.usd"] = event.costUsd;
 			if (event.latencyMs !== void 0) attrs["tangle.latency_ms"] = event.latencyMs;
 			if (event.finishReason !== void 0) attrs["gen_ai.response.finish_reasons"] = event.finishReason;
-			if (event.tools !== void 0 && event.tools.length > 0) attrs[TOOL_DEFINITIONS_ATTR] = JSON.stringify(event.tools.map((toolName) => ({
+			if (event.tools !== void 0 && event.tools.length > 0) attrs[ATTR.toolDefinitions] = JSON.stringify(event.tools.map((toolName) => ({
 				type: "function",
 				name: toolName
 			})));
@@ -8862,16 +8768,16 @@ function buildRuntimeEventOtelSpans(events, traceId, parentSpanId, options = {})
 * per-runId event array (e.g. flushed on `loop.ended`) and export the result.
 */
 function buildLoopOtelSpans(events, traceId, rootParentSpanId, redact) {
-	const tid = padTraceId(traceId);
+	const tid = toW3CTraceId(traceId);
 	return buildLoopSpanNodes(events, redact).map((node) => ({
 		traceId: tid,
 		spanId: node.spanId,
-		parentSpanId: node.parentSpanId ? padSpanId(node.parentSpanId) : rootParentSpanId ? padSpanId(rootParentSpanId) : void 0,
+		parentSpanId: node.parentSpanId ? toW3CSpanId(node.parentSpanId) : rootParentSpanId ? toW3CSpanId(rootParentSpanId) : void 0,
 		name: node.name,
 		kind: 1,
 		startTimeUnixNano: msToNs(node.startMs),
 		endTimeUnixNano: msToNs(node.endMs),
-		attributes: toOtelAttributes({
+		attributes: toOtlpAttributes({
 			...node.attrs,
 			[ATTR.spanKind]: LOOP_SPAN_KIND[node.kind],
 			...node.parentSpanId === void 0 && rootParentSpanId ? { [ATTR.parentConfidence]: "explicit" } : {}
@@ -8928,8 +8834,8 @@ function buildLoopSpanNodes(events, redact) {
 	});
 	const sp = rec(started?.payload);
 	const rootAttrs = {
-		[GEN_AI.operation]: "invoke_workflow",
-		[GEN_AI.conversationId]: runId,
+		[OPERATION_NAME_ATTR]: "invoke_workflow",
+		[ATTR.conversationId]: runId,
 		"tangle.run.id": runId,
 		"tangle.loop.driver": str(sp.driver) ?? "driver"
 	};
@@ -8971,7 +8877,7 @@ function buildLoopSpanNodes(events, redact) {
 				const id = generateSpanId();
 				const roundIdx = num(p.roundIndex) ?? 0;
 				const attrs = {
-					[GEN_AI.operation]: "invoke_workflow",
+					[OPERATION_NAME_ATTR]: "invoke_workflow",
 					"tangle.loop.round.index": roundIdx,
 					"tangle.loop.move.kind": str(p.moveKind) ?? "unknown",
 					"tangle.loop.move.round": roundIdx,
@@ -9016,16 +8922,16 @@ function buildLoopSpanNodes(events, redact) {
 				const start = iterStartTs.get(idx) ?? e.timestamp;
 				const err = strRedacted(p.error);
 				const attrs = {
-					[GEN_AI.operation]: "invoke_agent",
+					[OPERATION_NAME_ATTR]: "invoke_agent",
 					"tangle.loop.iteration.index": idx
 				};
 				const agent = str(p.agentRunName);
-				if (agent) attrs[GEN_AI.agentName] = agent;
+				if (agent) attrs[ATTR.agentName] = agent;
 				const tu = rec(p.tokenUsage);
 				const inTok = num(tu.input);
-				if (inTok !== void 0) attrs[GEN_AI.inputTokens] = inTok;
+				if (inTok !== void 0) attrs[ATTR.inputTokens] = inTok;
 				const outTok = num(tu.output);
-				if (outTok !== void 0) attrs[GEN_AI.outputTokens] = outTok;
+				if (outTok !== void 0) attrs[ATTR.outputTokens] = outTok;
 				const cost = num(p.costUsd);
 				if (cost !== void 0) attrs["tangle.cost.usd"] = cost;
 				const verdict = rec(p.verdict);
@@ -9073,48 +8979,8 @@ function parseHeadersFromEnv() {
 	}
 	return out;
 }
-/**
-* Convert a flat record into the OTLP attribute list. Non-finite numbers are DROPPED (an OTLP
-* `doubleValue` of `NaN`/`Infinity` is not representable), integers ride as `intValue`. Exported so
-* a producer that mints its own `OtelSpan` (the supervisor span recorder) builds attributes exactly
-* the way every span in this file does, rather than re-deriving the encoding.
-*/
-function toOtelAttributes(record) {
-	return Object.entries(record).flatMap(([key, value]) => {
-		if (typeof value === "number" && !Number.isFinite(value)) return [];
-		return [{
-			key,
-			value: typeof value === "number" ? Number.isInteger(value) ? { intValue: value.toString() } : { doubleValue: value } : typeof value === "boolean" ? { boolValue: value } : { stringValue: value }
-		}];
-	});
-}
 function msToNs(ms) {
-	return (BigInt(Math.floor(Number.isFinite(ms) ? ms : Date.now())) * 1000000n).toString();
-}
-/**
-* Map a caller-supplied span id onto the 16-hex OTLP encoding. An id that is already a valid W3C
-* span id passes through UNCHANGED — that is what lets an inherited `PARENT_SPAN_ID`/`TRACEPARENT`
-* id keep parenting the same trace. A DASHED hex id (a UUID-form id) passes through dash-stripped:
-* that is the exact wire id every earlier release exported for it, so cross-version joins survive
-* the strict-W3C upgrade. Anything else (a human run id) is DERIVED via the zero-dep contract's
-* `deriveHexId`, the one legal derivation: the old slice-and-pad produced ids that embedded the
-* raw input in the wire id and were not even valid hex (the contract's own `non-hex-id` validator
-* rejected what this module exported). Exported as the ONE wire-id normalization every writer
-* shares — `traceContextToEnv` builds the child's `TRACEPARENT` through these same functions, so
-* a parent's exported spans and the context it hands its children always name the same trace.
-*/
-function padSpanId(id) {
-	if (isW3CSpanId(id)) return id;
-	const dashless = id.replace(/-/g, "");
-	return isW3CSpanId(dashless) ? dashless : deriveHexId(id, 8);
-}
-/** Trace-id counterpart of {@link padSpanId}: valid W3C trace ids pass through (dash-stripped when
-*  UUID-form, preserving the pre-strict-W3C wire id), everything else is derived with
-*  `deriveHexId(id, 16)` so every process derives the SAME wire id for the same run. */
-function padTraceId(id) {
-	if (isW3CTraceId(id)) return id;
-	const dashless = id.replace(/-/g, "");
-	return isW3CTraceId(dashless) ? dashless : deriveHexId(id, 16);
+	return msToUnixNano(Number.isFinite(ms) ? ms : Date.now());
 }
 /** Mint a fresh 16-hex-character OTLP span id. Exported so a producer that must know a span's id
 *  BEFORE the span closes (a node opened at spawn and parented by its children) uses this one
@@ -9158,7 +9024,7 @@ function parseTraceparent(value) {
 	if (!match) return void 0;
 	const traceId = match[1].toLowerCase();
 	const parentSpanId = match[2].toLowerCase();
-	if (!isW3CTraceId(traceId) || !isW3CSpanId(parentSpanId)) return void 0;
+	if (!traceContract.isW3CTraceId(traceId) || !traceContract.isW3CSpanId(parentSpanId)) return void 0;
 	return {
 		traceId,
 		parentSpanId
@@ -9218,7 +9084,7 @@ function createPropagatingTraceEmitter(ctx) {
 * Build env vars to pass to a child subprocess so it inherits the current trace context.
 *
 * Writes BOTH conventions (see the module doc): `TRACEPARENT` carries the W3C-hex ids — mapped
-* through the exporter's own `padTraceId`/`padSpanId` (dashed hex passes through dash-stripped, a
+* through agent-trace-contract's `toW3CTraceId`/`toW3CSpanId` (dashed hex passes through dash-stripped, a
 * human id is derived through the contract's `deriveHexId`), the SAME normalization every emitted
 * span uses, so both spellings and the parent's own spans all name ONE trace — and the legacy
 * pair carries the caller's ids verbatim. `TRACEPARENT` needs a parent span id by grammar; when
@@ -9227,7 +9093,7 @@ function createPropagatingTraceEmitter(ctx) {
 function traceContextToEnv(ctx) {
 	const env = { TRACE_ID: ctx.traceId };
 	if (ctx.parentSpanId) env.PARENT_SPAN_ID = ctx.parentSpanId;
-	if (ctx.parentSpanId) env.TRACEPARENT = `00-${padTraceId(ctx.traceId)}-${padSpanId(ctx.parentSpanId)}-01`;
+	if (ctx.parentSpanId) env.TRACEPARENT = `00-${traceContract.toW3CTraceId(ctx.traceId)}-${traceContract.toW3CSpanId(ctx.parentSpanId)}-01`;
 	return env;
 }
 /**
@@ -29786,6 +29652,6 @@ async function noWinner(settled, rejection) {
 		reason: "no-result-selected"
 	};
 }
-export { abandonScopeRetainedOwnerInvocation as $, authoredSeatStages as $n, inheritRuntimeOwnedExecutorAttestation as $r, harnessTranscriptArtifact as $t, noteScopeOwnerPlannedExecution as A, DEFAULT_PEER_MAIL_LIMITS as An, runSettledCommand as Ar, acquireSandbox as At, deriveNodeExecutionIdentity as B, readWorkerProgress as Bn, profileMaterializationAxes$1 as Br, createAgentEnvironmentProviderRegistry as Bt, interactiveAdmissionSeamKey as C, createRuntimeStreamEventCollector as Cn, RunCancellationReason as Cr, DEFAULT_SANDBOX_STEERING_MAX_TURNS as Ct, recoverRetainedInteractiveRun as D, createInbox as Dn, bridgeRuntimeAttachmentsKey as Dr, readPromptOptions as Dt, reconnectRetainedInteractiveRun as E, INBOX_RECEIPT_KEY as En, signalAbortError as Er, assertBoxlessPromptOptions as Et, coordinationProfileToolPrefix as F, peerMailTools as Fn, assertProfileMaterialization as Fr, createCodeModeTools as Ft, meterRuntimeOwnedProviderAttempt as G, abandonablePending as Gn, sandboxProfileMaterialization as Gr, reconnectRetainedRun as Gt, queueOf as H, isTerminalNodeStatus as Hn, promptModelProfileMaterialization as Hr, providerAsExecutor as Ht, providerVisibleProfile as I, peerMailVerbNames as In, assertProfileMaterializes as Ir, runCodeMode as It, recordScopeOwnerPause as J, summarizeDriverAttempts as Jn, attestRuntimeOwnedPendingExecutor as Jr, startRetainedRunInEnvironment as Jt, recordScopeOwnerBarrenPause as K, causedByPartialFailure as Kn, unsupportedProfileDimensions as Kr, recoverRetainedRun as Kt, runtimeGraphMetadataKey as L, taskToPrompt$1 as Ln, controlProfileMaterialization as Lr, toolResultText as Lt, restoreScopeOwnerAcceptedExecution as M, claimsAuthority as Mn, LOCAL_HARNESSES as Mr, defaultSelectWinner as Mt, scopeOwnerExecutorNodeContext as N, createPeerMailbox as Nn, harnessInvocation as Nr, codeModeArguments as Nt, startRetainedInteractiveRun as O, failPendingAfter as On, bridgeStopSignalKey as Or, createSandboxForSpec as Ot, coordinationMcpAlias as P, isPeerMailEnvelope as Pn, terminateProcessTreeAndConfirm as Pr, codeModeModelOutput as Pt, resolveSpawnResourcePaths as Q, SeatChainExhaustedError as Qn, finalizeRuntimeOwnedPendingExecutor as Qr, captureHarnessTranscript as Qt, settledToIteration as R, DEFAULT_STALL_AFTER_MS as Rn, defineProfileMaterializationContract as Rr, createRouterTranscript as Rt, workerTraceAnalysisStore as S, createRuntimeEventCollector as Sn, createPushTraceSource as Sr, snapshotExecutorConfig as St, readWorkerInteractiveBinding as T, sanitizeRuntimeStreamEvent as Tn, runAbortable as Tr, runAgentRounds as Tt, rollingDispatch as U, DriverAttemptsExhaustedError as Un, renderUnsupported as Ur, LEAF_CONTINUATION_TASK as Ut, freeSlots as V, isLiveNodeStatus as Vn, promptControlProfileMaterialization as Vr, resolveAgentEnvironmentProvider as Vt, meterRuntimeOwnedAccounting as W, HarnessTurnFailedError as Wn, sandboxActProfileMaterialization as Wr, providerAsSandboxClient as Wt, scopeRetainedOwnerResourceReader as X, upstreamUnavailableSignal as Xn, authoredAgentIdentity as Xr, destroyInteractiveEnvironment as Xt, prepareScopeRetainedOwnerSeatSwitch as Y, undispatchedCredentialExit as Yn, attestRuntimeOwnedScopeOwner as Yr, retainedCreateMaterial as Yt, environmentReader as Z, SeatChain as Zn, authoredProfileDigest as Zr, environmentGone as Zt, withDriverExecutor as _, awaitAbortable$1 as _i, generateSpanId as _n, ROUTER_PRICE_SOURCE as _r, FileResultBlobStore as _t, assertRunParking as a, runtimeOwnedDriveHarnessProviderEvidence as ai, openSlotGroup as an, mapExecutorResult as ar, scopeRetainedOwnerTurnEnded as at, isTraceAnalysisStore as b, providerMessageText as bi, padTraceId as bn, harnessUsageIsEmpty as br, captureReusableExecutorConfig as bt, sleepScopeWait as c, runtimeOwnedExecutorProviderEvidence as ci, WORKER_TRACE_PROPAGATION as cn, admitContinuationPolicy as cr, noteScopeRetainedOwnerCoordination as ct, runFinalizer as d, unknownExecutionBindingReceipt as di, buildLoopOtelSpans as dn, createContinuationKeeper as dr, scopeRetainedOwnerContext as dt, knownExecutionBindingReceipt as ei, persistHarnessTranscript as en, seatExecutionProfile as er, consumeScopeRetainedOwnerResult as et, runTree as f, unknownMaterializationReceipt as fi, buildLoopSpanNodes as fn, failedItems as fr, scopeRetainedOwnerJournalRoot as ft, isDriverSpec as g, readSandboxOutcome as gi, flatOtelSpan as gn, priceTokens as gr, InMemorySpawnJournal as gt, driverExecutorFactory as h, projectSandboxOutcome as hi, createOtelExporter as hn, bridgeModelRouteRefusal as hr, InMemoryResultBlobStore as ht, RunParkedError as i, recordRuntimeOwnedDriveHarnessProviderEvidence as ii, createWorkerSlots as in, gateOnDeliverable as ir, beginScopeRetainedOwnerDrive as it, recordScopeOwnerMaterialization as j, PEER_MAIL_WIRE_KEY as jn, runWorktreeHarness as jr, TERMINAL_DECISIONS as jt, beginScopeOwnerAttempt as k, AUTHORITY_MARKERS as kn, defaultRunCommand as kr, createSandboxLineage as kt, withRunParking as l, runtimeOwnedPendingExecutorMaterialization as li, createPropagatingTraceEmitter as ln, bestComposite as lr, bindScopeRetainedOwnerEnvironmentId as lt, driverChild as m, executableAgentSpecSnapshot as mi, createOpenInferenceFileExporter as mn, bridgeAdmissionRefusal as mr, materializeTreeView as mt, createSupervisor as n, newExecutionAttemptId as ni, resolveHarnessTranscriptCapture as nn, CheckUnavailableError as nr, scopeRetainedOwnerPriorSpend as nt, bindScopeParkingDrain as o, runtimeOwnedExecutorExecutionBinding as oi, createWorktreeCliExecutor as on, verdictFromJudgeScore as or, reconcileScopeRetainedOwnerEnvironment as ot, createRootHandle as p, executableAgentProfileSnapshot as pi, buildRuntimeEventOtelSpans as pn, isFiniteNumber as pr, loadSpawnForest as pt, recordScopeOwnerDriverAttempt as q, classifyDriverFailure as qn, worktreeCliProfileMaterialization as qr, startRetainedRun as qt, assertResumeLimits as r, providerAttemptEvidence as ri, retainHarnessTranscript as rn, gateFactoryOnDeliverable as rr, scopeRetainedOwnerResult as rt, readRunParking as s, runtimeOwnedExecutorMaterialization as si, createInPlaceCliExecutor as sn, CONTINUATIONS_DIR as sr, scopeRetainedOwnerRestorePoint as st, DEFAULT_MAX_DEPTH as t, knownMaterializationReceipt as ti, readHarnessTranscript as tn, subscriptionUsageLimitSignal as tr, prepareScopeRetainedOwnerTask as tt, bestDelivered as u, runtimeOwnedScopeOwnerRuntime as ui, readTraceContextFromEnv as un, checkVerdictOf as ur, bindScopeRetainedOwnerProvider as ut, createScope as v, promptFromAgentTurnInput as vi, loopEventToOtelSpan as vn, addHarnessUsage as vr, createExecutorRegistry as vt, attachWorker as w, sanitizeKnowledgeReadinessReport as wn, linkAbort as wr, createSteerableSandboxSession as wt, parseWorkerToolTraceArtifact as x, toOtelAttributes as xn, readCodexRolloutSession as xr, createExecutor as xt, replaySpawnTree as y, promptOptionsFromAgentTurnInput as yi, padSpanId as yn, createCodexRolloutStoreReader as yr, bindReusableExecutorExecutionId as yt, assertRecursiveReservationPolicy as z, createActivityLog as zn, fullProfileMaterialization as zr, routerBrain as zt };
+export { abandonScopeRetainedOwnerInvocation as $, CheckUnavailableError as $n, newExecutionAttemptId as $r, harnessTranscriptArtifact as $t, noteScopeOwnerPlannedExecution as A, createPeerMailbox as An, harnessInvocation as Ar, acquireSandbox as At, deriveNodeExecutionIdentity as B, DriverAttemptsExhaustedError as Bn, renderUnsupported as Br, createAgentEnvironmentProviderRegistry as Bt, interactiveAdmissionSeamKey as C, INBOX_RECEIPT_KEY as Cn, signalAbortError as Cr, DEFAULT_SANDBOX_STEERING_MAX_TURNS as Ct, recoverRetainedInteractiveRun as D, DEFAULT_PEER_MAIL_LIMITS as Dn, runSettledCommand as Dr, readPromptOptions as Dt, reconnectRetainedInteractiveRun as E, AUTHORITY_MARKERS as En, defaultRunCommand as Er, assertBoxlessPromptOptions as Et, coordinationProfileToolPrefix as F, DEFAULT_STALL_AFTER_MS as Fn, defineProfileMaterializationContract as Fr, createCodeModeTools as Ft, meterRuntimeOwnedProviderAttempt as G, summarizeDriverAttempts as Gn, attestRuntimeOwnedPendingExecutor as Gr, reconnectRetainedRun as Gt, queueOf as H, abandonablePending as Hn, sandboxProfileMaterialization as Hr, providerAsExecutor as Ht, providerVisibleProfile as I, createActivityLog as In, fullProfileMaterialization as Ir, runCodeMode as It, recordScopeOwnerPause as J, SeatChain as Jn, authoredProfileDigest as Jr, startRetainedRunInEnvironment as Jt, recordScopeOwnerBarrenPause as K, undispatchedCredentialExit as Kn, attestRuntimeOwnedScopeOwner as Kr, recoverRetainedRun as Kt, runtimeGraphMetadataKey as L, readWorkerProgress as Ln, profileMaterializationAxes$1 as Lr, toolResultText as Lt, restoreScopeOwnerAcceptedExecution as M, peerMailTools as Mn, assertProfileMaterialization as Mr, defaultSelectWinner as Mt, scopeOwnerExecutorNodeContext as N, peerMailVerbNames as Nn, assertProfileMaterializes as Nr, codeModeArguments as Nt, startRetainedInteractiveRun as O, PEER_MAIL_WIRE_KEY as On, runWorktreeHarness as Or, createSandboxForSpec as Ot, coordinationMcpAlias as P, taskToPrompt$1 as Pn, controlProfileMaterialization as Pr, codeModeModelOutput as Pt, resolveSpawnResourcePaths as Q, subscriptionUsageLimitSignal as Qn, knownMaterializationReceipt as Qr, captureHarnessTranscript as Qt, settledToIteration as R, isLiveNodeStatus as Rn, promptControlProfileMaterialization as Rr, createRouterTranscript as Rt, workerTraceAnalysisStore as S, sanitizeRuntimeStreamEvent as Sn, runAbortable as Sr, snapshotExecutorConfig as St, readWorkerInteractiveBinding as T, failPendingAfter as Tn, bridgeStopSignalKey as Tr, runAgentRounds as Tt, rollingDispatch as U, causedByPartialFailure as Un, unsupportedProfileDimensions as Ur, LEAF_CONTINUATION_TASK as Ut, freeSlots as V, HarnessTurnFailedError as Vn, sandboxActProfileMaterialization as Vr, resolveAgentEnvironmentProvider as Vt, meterRuntimeOwnedAccounting as W, classifyDriverFailure as Wn, worktreeCliProfileMaterialization as Wr, providerAsSandboxClient as Wt, scopeRetainedOwnerResourceReader as X, authoredSeatStages as Xn, inheritRuntimeOwnedExecutorAttestation as Xr, destroyInteractiveEnvironment as Xt, prepareScopeRetainedOwnerSeatSwitch as Y, SeatChainExhaustedError as Yn, finalizeRuntimeOwnedPendingExecutor as Yr, retainedCreateMaterial as Yt, environmentReader as Z, seatExecutionProfile as Zn, knownExecutionBindingReceipt as Zr, environmentGone as Zt, withDriverExecutor as _, awaitAbortable$1 as _i, generateSpanId as _n, harnessUsageIsEmpty as _r, FileResultBlobStore as _t, assertRunParking as a, runtimeOwnedExecutorProviderEvidence as ai, openSlotGroup as an, admitContinuationPolicy as ar, scopeRetainedOwnerTurnEnded as at, isTraceAnalysisStore as b, providerMessageText as bi, createRuntimeStreamEventCollector as bn, RunCancellationReason as br, captureReusableExecutorConfig as bt, sleepScopeWait as c, unknownExecutionBindingReceipt as ci, WORKER_TRACE_PROPAGATION as cn, createContinuationKeeper as cr, noteScopeRetainedOwnerCoordination as ct, runFinalizer as d, executableAgentSpecSnapshot as di, buildLoopOtelSpans as dn, bridgeAdmissionRefusal as dr, scopeRetainedOwnerContext as dt, providerAttemptEvidence as ei, persistHarnessTranscript as en, gateFactoryOnDeliverable as er, consumeScopeRetainedOwnerResult as et, runTree as f, isRuntimeFlowBrain as fi, buildLoopSpanNodes as fn, bridgeModelRouteRefusal as fr, scopeRetainedOwnerJournalRoot as ft, isDriverSpec as g, readSandboxOutcome as gi, flatOtelSpan as gn, createCodexRolloutStoreReader as gr, InMemorySpawnJournal as gt, driverExecutorFactory as h, projectSandboxOutcome as hi, createOtelExporter as hn, addHarnessUsage as hr, InMemoryResultBlobStore as ht, RunParkedError as i, runtimeOwnedExecutorMaterialization as ii, createWorkerSlots as in, CONTINUATIONS_DIR as ir, beginScopeRetainedOwnerDrive as it, recordScopeOwnerMaterialization as j, isPeerMailEnvelope as jn, terminateProcessTreeAndConfirm as jr, TERMINAL_DECISIONS as jt, beginScopeOwnerAttempt as k, claimsAuthority as kn, LOCAL_HARNESSES as kr, createSandboxLineage as kt, withRunParking as l, unknownMaterializationReceipt as li, createPropagatingTraceEmitter as ln, failedItems as lr, bindScopeRetainedOwnerEnvironmentId as lt, driverChild as m, runtimeFlowBrain as mi, createOpenInferenceFileExporter as mn, ROUTER_PRICE_SOURCE as mr, materializeTreeView as mt, createSupervisor as n, runtimeOwnedDriveHarnessProviderEvidence as ni, resolveHarnessTranscriptCapture as nn, mapExecutorResult as nr, scopeRetainedOwnerPriorSpend as nt, bindScopeParkingDrain as o, runtimeOwnedPendingExecutorMaterialization as oi, createWorktreeCliExecutor as on, bestComposite as or, reconcileScopeRetainedOwnerEnvironment as ot, createRootHandle as p, runtimeFlowAgent as pi, buildRuntimeEventOtelSpans as pn, priceTokens as pr, loadSpawnForest as pt, recordScopeOwnerDriverAttempt as q, upstreamUnavailableSignal as qn, authoredAgentIdentity as qr, startRetainedRun as qt, assertResumeLimits as r, runtimeOwnedExecutorExecutionBinding as ri, retainHarnessTranscript as rn, verdictFromJudgeScore as rr, scopeRetainedOwnerResult as rt, readRunParking as s, runtimeOwnedScopeOwnerRuntime as si, createInPlaceCliExecutor as sn, checkVerdictOf as sr, scopeRetainedOwnerRestorePoint as st, DEFAULT_MAX_DEPTH as t, recordRuntimeOwnedDriveHarnessProviderEvidence as ti, readHarnessTranscript as tn, gateOnDeliverable as tr, prepareScopeRetainedOwnerTask as tt, bestDelivered as u, executableAgentProfileSnapshot as ui, readTraceContextFromEnv as un, isFiniteNumber as ur, bindScopeRetainedOwnerProvider as ut, createScope as v, promptFromAgentTurnInput as vi, loopEventToOtelSpan as vn, readCodexRolloutSession as vr, createExecutorRegistry as vt, attachWorker as w, createInbox as wn, bridgeRuntimeAttachmentsKey as wr, createSteerableSandboxSession as wt, parseWorkerToolTraceArtifact as x, sanitizeKnowledgeReadinessReport as xn, linkAbort as xr, createExecutor as xt, replaySpawnTree as y, promptOptionsFromAgentTurnInput as yi, createRuntimeEventCollector as yn, createPushTraceSource as yr, bindReusableExecutorExecutionId as yt, assertRecursiveReservationPolicy as z, isTerminalNodeStatus as zn, promptModelProfileMaterialization as zr, routerBrain as zt };
 
-//# sourceMappingURL=supervisor-rK5Y8en6.js.map
+//# sourceMappingURL=supervisor-C3JhrVVU.js.map