@tangle-network/agent-runtime 1.0.0 → 2.0.2

package/dist/{supervise-BXw89Ajc.js → supervise-Cl0F57m9.js}

@@ -1,21 +1,24 @@
-import { G as cappedDoublingMs, J as unavailableResumeAt, K as jitteredMs, P as RetainedExecutionPendingError, St as newUsageTotals, T as sha256, Tt as assertValidBudget, V as retainedExecutorSeamKey, Xt as __exportAll, a as isNoEntError, at as executorFailure, b as captureRunWriteContext, c as readCommittedJsonLines, ft as errMessage, g as assertNoSymlinkDescendant, l as upsertCommittedJsonLine, o as prepareJsonlAppend, q as unavailablePauseMs, rt as contentAddress, s as readCommittedJsonFile, tt as detachedSnapshot, u as withJsonlFileLock, wt as spendFromUsageTotals, x as fenceRunWrite, xt as meterUsageEvent, y as writeAtomicDurableFile, z as registerRetainedExecutorPreparation } from "./journal-store-BJPMUydp.js";
-import { $ as abandonScopeRetainedOwnerInvocation, $n as CheckUnavailableError, A as noteScopeOwnerPlannedExecution, B as deriveNodeExecutionIdentity, Bn as DriverAttemptsExhaustedError, Br as renderUnsupported, Cn as INBOX_RECEIPT_KEY, F as coordinationProfileToolPrefix, Fr as defineProfileMaterializationContract, Ft as createCodeModeTools, G as meterRuntimeOwnedProviderAttempt, Gn as summarizeDriverAttempts, Hn as abandonablePending, Hr as sandboxProfileMaterialization, I as providerVisibleProfile, In as createActivityLog, Ir as fullProfileMaterialization, J as recordScopeOwnerPause, Jn as SeatChain, K as recordScopeOwnerBarrenPause, Kn as undispatchedCredentialExit, Kr as attestRuntimeOwnedScopeOwner, L as runtimeGraphMetadataKey, Lr as profileMaterializationAxes$1, Lt as toolResultText, M as restoreScopeOwnerAcceptedExecution, Mr as assertProfileMaterialization, N as scopeOwnerExecutorNodeContext, Nt as codeModeArguments, On as PEER_MAIL_WIRE_KEY, P as coordinationMcpAlias, Pr as controlProfileMaterialization, Pt as codeModeModelOutput, Rn as isLiveNodeStatus, Rr as promptControlProfileMaterialization, Rt as createRouterTranscript, Sr as runAbortable, St as snapshotExecutorConfig, Tr as bridgeStopSignalKey, Un as causedByPartialFailure, Ur as unsupportedProfileDimensions, Vn as HarnessTurnFailedError, Vt as resolveAgentEnvironmentProvider, W as meterRuntimeOwnedAccounting, Wn as classifyDriverFailure, Wr as worktreeCliProfileMaterialization, X as scopeRetainedOwnerResourceReader, Xn as authoredSeatStages, Xr as inheritRuntimeOwnedExecutorAttestation, Y as prepareScopeRetainedOwnerSeatSwitch, Yn as SeatChainExhaustedError, Zn as seatExecutionProfile, _n as generateSpanId, a as assertRunParking, ai as runtimeOwnedExecutorProviderEvidence, ar as admitContinuationPolicy, at as scopeRetainedOwnerTurnEnded, br as RunCancellationReason, bt as captureReusableExecutorConfig, c as sleepScopeWait, cn as WORKER_TRACE_PROPAGATION, cr as createContinuationKeeper, ct as noteScopeRetainedOwnerCoordination, d as runFinalizer, dr as bridgeAdmissionRefusal, dt as scopeRetainedOwnerContext, ei as providerAttemptEvidence, en as persistHarnessTranscript, er as gateFactoryOnDeliverable, et as consumeScopeRetainedOwnerResult, f as runTree, fr as bridgeModelRouteRefusal, ft as scopeRetainedOwnerJournalRoot, g as isDriverSpec, h as driverExecutorFactory, hn as createOtelExporter, i as RunParkedError, ii as runtimeOwnedExecutorMaterialization, ir as CONTINUATIONS_DIR, it as beginScopeRetainedOwnerDrive, j as recordScopeOwnerMaterialization, jn as isPeerMailEnvelope, k as beginScopeOwnerAttempt, l as withRunParking, lt as bindScopeRetainedOwnerEnvironmentId, m as driverChild, n as createSupervisor, ni as runtimeOwnedDriveHarnessProviderEvidence, nt as scopeRetainedOwnerPriorSpend, o as bindScopeParkingDrain, oi as runtimeOwnedPendingExecutorMaterialization, or as bestComposite, ot as reconcileScopeRetainedOwnerEnvironment, p as createRootHandle, q as recordScopeOwnerDriverAttempt, qn as upstreamUnavailableSignal, qr as authoredAgentIdentity, ri as runtimeOwnedExecutorExecutionBinding, rt as scopeRetainedOwnerResult, si as runtimeOwnedScopeOwnerRuntime, sr as checkVerdictOf, st as scopeRetainedOwnerRestorePoint, ti as recordRuntimeOwnedDriveHarnessProviderEvidence, tn as readHarnessTranscript, tt as prepareScopeRetainedOwnerTask, u as bestDelivered, ut as bindScopeRetainedOwnerProvider, wn as createInbox, wr as bridgeRuntimeAttachmentsKey, x as parseWorkerToolTraceArtifact, xr as linkAbort, xt as createExecutor, yt as bindReusableExecutorExecutionId, z as assertRecursiveReservationPolicy, zn as isTerminalNodeStatus, zr as promptModelProfileMaterialization, zt as routerBrain } from "./supervisor-hHU3ZJnR.js";
+import { $ as abandonScopeRetainedOwnerInvocation, $n as gateFactoryOnDeliverable, $r as providerAttemptEvidence, $t as persistHarnessTranscript, A as noteScopeOwnerPlannedExecution, An as isPeerMailEnvelope, B as deriveNodeExecutionIdentity, Bn as HarnessTurnFailedError, Bt as resolveAgentEnvironmentProvider, Cn as createInbox, Cr as bridgeRuntimeAttachmentsKey, Dn as PEER_MAIL_WIRE_KEY, F as coordinationProfileToolPrefix, Fn as createActivityLog, Fr as fullProfileMaterialization, G as meterRuntimeOwnedProviderAttempt, Gn as undispatchedCredentialExit, Gr as attestRuntimeOwnedScopeOwner, Hn as causedByPartialFailure, Hr as unsupportedProfileDimensions, I as providerVisibleProfile, Ir as profileMaterializationAxes$1, It as toolResultText, J as recordScopeOwnerPause, Jn as SeatChainExhaustedError, K as recordScopeOwnerBarrenPause, Kn as upstreamUnavailableSignal, Kr as authoredAgentIdentity, L as runtimeGraphMetadataKey, Ln as isLiveNodeStatus, Lr as promptControlProfileMaterialization, Lt as createRouterTranscript, M as restoreScopeOwnerAcceptedExecution, Mt as codeModeArguments, N as scopeOwnerExecutorNodeContext, Nr as controlProfileMaterialization, Nt as codeModeModelOutput, P as coordinationMcpAlias, Pr as defineProfileMaterializationContract, Pt as createCodeModeTools, Qn as CheckUnavailableError, Rn as isTerminalNodeStatus, Rr as promptModelProfileMaterialization, Rt as routerBrain, Sn as INBOX_RECEIPT_KEY, Un as classifyDriverFailure, Ur as worktreeCliProfileMaterialization, Vn as abandonablePending, Vr as sandboxProfileMaterialization, W as meterRuntimeOwnedAccounting, Wn as summarizeDriverAttempts, X as scopeRetainedOwnerResourceReader, Xn as seatExecutionProfile, Y as prepareScopeRetainedOwnerSeatSwitch, Yn as authoredSeatStages, Yr as inheritRuntimeOwnedExecutorAttestation, a as assertRunParking, ai as runtimeOwnedPendingExecutorMaterialization, ar as bestComposite, at as scopeRetainedOwnerTurnEnded, br as linkAbort, bt as createExecutor, c as sleepScopeWait, ct as noteScopeRetainedOwnerCoordination, d as runFinalizer, di as isRuntimeFlowBrain, dr as bridgeModelRouteRefusal, dt as scopeRetainedOwnerContext, ei as recordRuntimeOwnedDriveHarnessProviderEvidence, en as readHarnessTranscript, et as consumeScopeRetainedOwnerResult, f as runTree, fi as runtimeFlowAgent, ft as scopeRetainedOwnerJournalRoot, g as isDriverSpec, gn as generateSpanId, h as driverExecutorFactory, i as RunParkedError, ii as runtimeOwnedExecutorProviderEvidence, ir as admitContinuationPolicy, it as beginScopeRetainedOwnerDrive, j as recordScopeOwnerMaterialization, jr as assertProfileMaterialization, k as beginScopeOwnerAttempt, l as withRunParking, lt as bindScopeRetainedOwnerEnvironmentId, m as driverChild, mn as createOtelExporter, n as createSupervisor, ni as runtimeOwnedExecutorExecutionBinding, nt as scopeRetainedOwnerPriorSpend, o as bindScopeParkingDrain, oi as runtimeOwnedScopeOwnerRuntime, or as checkVerdictOf, ot as reconcileScopeRetainedOwnerEnvironment, p as createRootHandle, pi as runtimeFlowBrain, q as recordScopeOwnerDriverAttempt, qn as SeatChain, ri as runtimeOwnedExecutorMaterialization, rr as CONTINUATIONS_DIR, rt as scopeRetainedOwnerResult, sn as WORKER_TRACE_PROPAGATION, sr as createContinuationKeeper, st as scopeRetainedOwnerRestorePoint, ti as runtimeOwnedDriveHarnessProviderEvidence, tt as prepareScopeRetainedOwnerTask, u as bestDelivered, ur as bridgeAdmissionRefusal, ut as bindScopeRetainedOwnerProvider, vt as bindReusableExecutorExecutionId, wr as bridgeStopSignalKey, x as parseWorkerToolTraceArtifact, xr as runAbortable, xt as snapshotExecutorConfig, yr as RunCancellationReason, yt as captureReusableExecutorConfig, z as assertRecursiveReservationPolicy, zn as DriverAttemptsExhaustedError, zr as renderUnsupported } from "./supervisor-L7u3pQ1j.js";
 import { f as RuntimeRunStateError, i as ConfigError, m as ValidationError } from "./errors-AzSuGI23.js";
-import { B as teardownExecutor, C as withTimeout, E as addResourceSpend, N as DEFAULT_SUCCESSFUL_SHUTDOWN_MS, O as resourceTelemetry, R as isDeadlineAbortReason, S as unmeteredSpend, V as teardownSurfaces, c as errorMessage, f as isAsyncIterable, i as chargedTokens, k as withBudgetResources, m as promptCacheTokenClasses, n as addSpend, v as sleep, w as zeroSpend } from "./util-ebWMWzY0.js";
+import { B as teardownExecutor, C as withTimeout, E as addResourceSpend, N as DEFAULT_SUCCESSFUL_SHUTDOWN_MS, O as resourceTelemetry, R as isDeadlineAbortReason, S as unmeteredSpend, V as teardownSurfaces, c as errorMessage, f as isAsyncIterable, i as chargedTokens, k as withBudgetResources, m as promptCacheTokenClasses, n as addSpend, v as sleep, w as zeroSpend } from "./util-BX20UJ9X.js";
+import { $ as newUsageTotals, D as registerRetainedExecutorPreparation, F as unavailablePauseMs, H as contentAddress, I as unavailableResumeAt, N as cappedDoublingMs, P as jitteredMs, Q as meterUsageEvent, S as RetainedExecutionPendingError, W as executorFailure, k as retainedExecutorSeamKey, nt as assertValidBudget, tt as spendFromUsageTotals } from "./journal-store-BpCOCDoO.js";
+import { d as detachedSnapshot, i as prepareJsonlAppend, m as errMessage, n as isNoEntError, o as readCommittedJsonLines } from "./jsonl-file-BBP9Dz9w.js";
 import { _ as agentHarness, a as concreteProfileModel, c as profileModelExecutionSettings, l as profileProviderModel, n as assertModelAllowed, o as enforceTokenLimits, r as assertProfileModelsAllowed, s as profileBridgeWireModel, t as assertExecutableAgentProfile, v as harnessRunsAgent } from "./model-policy-C-RGAUW4.js";
+import { n as assertNoSymlinkDescendant, o as captureRunWriteContext, s as fenceRunWrite } from "./durable-file-DstVeHcj.js";
 import { t as composeRuntimeHooks } from "./runtime-hooks-CsW2pfFk.js";
-import { c as createCancelAcknowledger, d as normalizeAnalyzeOnSettle, f as coordinationVerbNames, g as withRunContext, h as createInMemoryRunContext, l as createSteerAcknowledger, m as createFileRunContext, n as createCoordinationToolsForManager, o as resolveJsonPointer, p as safeJsonText, t as createCoordinationTools, u as budgetOverspendText } from "./coordination-manager-ewBF777W.js";
-import { c as writeRunCancellation, i as readRunCancellation, r as readRunCancelRequest, s as watchRunCancellation, t as applyRunCancellation } from "./run-cancellation-CoJRKvih.js";
+import { c as createSteerAcknowledger, d as coordinationVerbNames, f as createFileRunContext, l as budgetOverspendText, m as withRunContext, n as createCoordinationToolsForManager, p as createInMemoryRunContext, s as createCancelAcknowledger, t as createCoordinationTools, u as normalizeAnalyzeOnSettle } from "./coordination-manager-BZLp9qpE.js";
+import { c as writeRunCancellation, i as readRunCancellation, r as readRunCancelRequest, s as watchRunCancellation, t as applyRunCancellation } from "./run-cancellation-Cpm-BIUu.js";
+import { o as safeJsonText } from "./coordination-map-routing-CUvwHAtv.js";
 import { n as createStdioToolServer, t as PROTOCOL_VERSION } from "./tool-server-CZWd_Opp.js";
+import { a as graphRegistry, c as loadGraph } from "./graph-registry-72DlMnUl.js";
 import { ATTR, agentIdentityAttributes } from "@tangle-network/agent-trace-contract";
 import { agentProfileSchema, canonicalAgentProfileDigest, canonicalCandidateDigest, canonicalCandidateJson, validateAgentProfileSecurity } from "@tangle-network/agent-interface";
 import { toolSpansToTraceAnalysisStore } from "@tangle-network/agent-eval";
 import { isRecord } from "@tangle-network/agent-core";
-import { z } from "zod";
 import { createHash, createHmac, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
 import { closeSync, constants, fsyncSync, openSync, writeSync } from "node:fs";
-import { dirname, join, resolve } from "node:path";
-import { mkdir, readFile, readdir } from "node:fs/promises";
+import { dirname, resolve } from "node:path";
+import { mkdir } from "node:fs/promises";
 import { isMaterializerHarness } from "@tangle-network/agent-profile-materialize";
 import { createServer } from "node:http";
 import { msToUnixNano, toOtlpAttributes } from "@tangle-network/agent-trace-contract/otlp";
@@ -1868,10 +1871,6 @@ var GraphRouteError = class extends Error {
 const flowRootProfile = Object.freeze({
 	name: "flow",
 	harness: "cli-base",
-	model: {
-		provider: "runtime",
-		default: "runtime/flow"
-	},
 	tools: { [`${coordinationProfileToolPrefix}spawn_worker`]: true }
 });
 /** The nodes a routes edge starts: one, every node of a fork, or none for a stop or finish. */
@@ -2623,27 +2622,6 @@ function ledgerAnalyzes(ledger, edge, outcome, bytes, reason, workerId) {
 		...workerId !== void 0 ? { workerId } : {}
 	}, true);
 }
-// src/runtime/supervise/flow-brain.ts
-const flowBrains = /* @__PURE__ */ new WeakSet();
-/**
-* The brain of a flow graph's runtime-owned root manager. It never calls a model: every turn
-* returns no tool call and reports no usage, so the manager only waits while the flow's runtime
-* spawns are open and ends when none is. The driver recognizes it by identity, places no provider
-* attempt for its turns, and bounds them by the flow's edge caps, the pool, the deadline and the
-* abort signal instead of the unmetered-turn bound.
-*/
-function runtimeFlowBrain() {
-	const brain = async () => ({
-		content: null,
-		toolCalls: []
-	});
-	flowBrains.add(brain);
-	return brain;
-}
-/** True only for a brain `runtimeFlowBrain` minted. */
-function isRuntimeFlowBrain(brain) {
-	return flowBrains.has(brain);
-}
 // src/runtime/supervise/supervise-budget.ts
 /**
 * Which of a driver's budget channels are spent, with their numbers, or `undefined` while none is.
@@ -6671,7 +6649,7 @@ function routerBrainFromProfile(profile, router) {
 // src/runtime/supervise/supervisor-agent-build.ts
 function buildSupervisorAgent(profile, deps, testBrain) {
 	const exactProfile = agentProfileSchema.parse(profile);
-	assertExecutableAgentProfile(exactProfile, "supervisorAgent");
+	if (!testBrain || !isRuntimeFlowBrain(testBrain)) assertExecutableAgentProfile(exactProfile, "supervisorAgent");
 	const stableProfile = detachedSnapshot(exactProfile, "supervisorAgent profile");
 	const registeredProfile = deps.registeredProfile === void 0 ? stableProfile : detachedSnapshot(agentProfileSchema.parse(deps.registeredProfile), "supervisorAgent registered profile");
 	const stableRouter = deps.router === void 0 ? void 0 : snapshotRouterTransportConfig(deps.router);
@@ -6690,17 +6668,20 @@ function buildSupervisorAgent(profile, deps, testBrain) {
 	assertCoordinationBinding(coordination);
 	assertSupervisorArmPolicy(harness, deps, runtimeToolNames, coordination);
 	const continuationDeadlineMs = deps.continuation === void 0 ? void 0 : admitContinuationPolicy(deps.continuation, "supervisorAgent");
-	if (harness === null) return routerSupervisorAgent({
-		name,
-		deps,
-		profile: stableProfile,
-		runtimeToolNames,
-		nodeContextSeed,
-		testBrain,
-		router: stableRouter,
-		resolveTools,
-		observeNodeEvent
-	});
+	if (harness === null) {
+		const agent = routerSupervisorAgent({
+			name,
+			deps,
+			profile: stableProfile,
+			runtimeToolNames,
+			nodeContextSeed,
+			testBrain,
+			router: stableRouter,
+			resolveTools,
+			observeNodeEvent
+		});
+		return runtimeFlowAgent(agent, testBrain);
+	}
 	return externalSupervisorAgent({
 		name,
 		deps,
@@ -7407,597 +7388,6 @@ function admitSpawn(env, seat, authoredProfile, spawnContext, recovering) {
 		usesRuntimeCoordination: declaredRuntimeToolNames(authorized).length > 0 || seatManagedLeaf
 	};
 }
-// src/runtime/supervise/graph-file-schema.ts
-const scalar = z.union([
-	z.string(),
-	z.number().finite(),
-	z.boolean(),
-	z.null()
-]);
-const pointer = z.string().regex(/^(?:\/(?:[^~]|~[01])*)*$/);
-const matchBase = {
-	node: z.string().min(1).optional(),
-	pointer
-};
-const equals = z.strictObject({
-	...matchBase,
-	equals: scalar
-});
-const oneOf = z.strictObject({
-	...matchBase,
-	in: z.array(scalar)
-});
-const exists = z.strictObject({
-	...matchBase,
-	exists: z.boolean()
-});
-const match = z.union([
-	equals,
-	oneOf,
-	exists
-]);
-/** The same data grammar as routes; no executable expressions or additional operators. */
-const graphRouteWhenSchema = z.union([match, z.strictObject({ all: z.array(match).min(1) })]);
-const parameter = z.strictObject({
-	default: z.unknown().optional(),
-	type: z.enum([
-		"string",
-		"number",
-		"integer",
-		"boolean",
-		"object",
-		"array",
-		"null"
-	]).optional()
-});
-const command = z.strictObject({
-	command: z.string().min(1),
-	timeoutMs: z.number().int().positive().optional()
-});
-const nonnegativeInteger = z.number().int().nonnegative();
-/** Authoring envelope. Canonical profiles and topology are validated by their existing owners. */
-const graphFileSchema = z.strictObject({
-	digest: z.string().min(1).optional(),
-	graph: z.string().min(1).optional(),
-	describe: z.string().optional(),
-	params: z.record(z.string().min(1), parameter).optional(),
-	nodes: z.array(z.strictObject({
-		id: z.string().min(1),
-		profile: z.record(z.string(), z.unknown()).optional(),
-		seat: z.union([z.string().min(1), z.array(z.string().min(1)).min(1)]).optional(),
-		needs: z.array(z.string().min(1)).optional()
-	})).min(1),
-	entry: z.array(z.union([z.string().min(1), z.strictObject({
-		node: z.string().min(1),
-		task: z.unknown()
-	})])).min(1).optional(),
-	edges: z.array(z.record(z.string(), z.unknown())),
-	gates: z.array(z.unknown()).optional(),
-	budget: z.strictObject({
-		maxIterations: nonnegativeInteger,
-		maxTokens: nonnegativeInteger,
-		maxUsd: z.number().finite().nonnegative().optional(),
-		deadlineMs: nonnegativeInteger.optional(),
-		resources: z.record(z.string(), z.strictObject({
-			unit: z.string().min(1),
-			limit: nonnegativeInteger
-		})).optional()
-	}),
-	check: z.union([
-		equals.extend({ describe: z.string().optional() }),
-		oneOf.extend({ describe: z.string().optional() }),
-		exists.extend({ describe: z.string().optional() }),
-		z.strictObject({
-			describe: z.string().optional(),
-			all: z.array(match).min(1)
-		}),
-		z.strictObject({
-			describe: z.string().optional(),
-			command
-		})
-	]).optional(),
-	deliverable: z.strictObject({
-		describe: z.string().optional(),
-		checkRef: z.string().min(1),
-		command: command.optional(),
-		when: graphRouteWhenSchema.optional()
-	}).optional(),
-	on: z.unknown().optional()
-});
-/** Judge the flow's terminal-output map with RouteWhen's own JSON-pointer semantics. */
-function checkGraphRoute(when, output) {
-	return ("all" in when ? when.all : [when]).every((condition) => {
-		let document = output;
-		if (condition.node !== void 0) {
-			if (!output || typeof output !== "object" || !Object.hasOwn(output, condition.node)) return false;
-			document = output[condition.node];
-		}
-		const selected = resolveJsonPointer(document, condition.pointer);
-		if ("exists" in condition) return selected.found === condition.exists;
-		if (!selected.found) return false;
-		return "equals" in condition ? selected.value === condition.equals : condition.in.some((value) => value === selected.value);
-	});
-}
-// src/runtime/supervise/graph-parameters.ts
-const triggerPart = z.strictObject({ trigger: z.array(z.string()).min(1) });
-const literalPart = z.strictObject({ literal: z.string() });
-/** Explicit authored trigger slots in compiled graph data. An empty list marks fully bound data. */
-const graphTriggerBindingsSchema = z.array(z.strictObject({
-	path: z.array(z.union([z.string(), z.number().int().nonnegative()])).min(1),
-	mode: z.enum(["value", "text"]),
-	parts: z.array(z.union([literalPart, triggerPart])).min(1)
-}).superRefine((slot, context) => {
-	if (!slot.parts.some((part) => "trigger" in part) || slot.mode === "value" && (slot.parts.length !== 1 || !("trigger" in slot.parts[0]))) context.addIssue({
-		code: "custom",
-		message: "binding requires authored trigger parts; value slots require one trigger"
-	});
-}));
-function readBinding(namespace, keys, bindings) {
-	let found = bindings[namespace];
-	for (const key of keys) {
-		if (!found || typeof found !== "object" || !Object.hasOwn(found, key)) throw new ValidationError(`graph parameters: missing ${[namespace, ...keys].join(".")}`);
-		found = found[key];
-	}
-	if (found === void 0) throw new ValidationError(`graph parameters: missing ${[namespace, ...keys].join(".")}`);
-	return structuredClone(found);
-}
-function textValue(value, expression) {
-	if (value !== null && typeof value === "object") throw new ValidationError(`graph parameters: ${expression} needs a whole JSON slot`);
-	return String(value);
-}
-function pendingText(parts) {
-	return parts.map((part) => "literal" in part ? part.literal : `\${trigger.${part.trigger.join(".")}}`).join("");
-}
-/** Compile authored slots once. Inserted values are data, never recursively parsed templates. */
-function compileGraphParameters(value, bindings, options = {}) {
-	const visiting = /* @__PURE__ */ new Set();
-	const triggerBindings = [];
-	const bind = (item, path) => {
-		if (typeof item === "string") {
-			if (item.replace(/\$\{[^{}]+\}/g, "").includes("${")) throw new ValidationError("graph parameters: malformed reference");
-			const whole = /^\$\{([^{}]+)\}$/.exec(item);
-			const parts = [];
-			let cursor = 0;
-			let wholeValue;
-			let boundWhole = false;
-			for (const match of item.matchAll(/\$\{([^{}]+)\}/g)) {
-				if (match.index > cursor) parts.push({ literal: item.slice(cursor, match.index) });
-				const [namespace, ...keys] = match[1].split(".");
-				if (namespace !== "params" && namespace !== "trigger" || keys.length === 0) throw new ValidationError(`graph parameters: unsupported reference \${${match[1]}}`);
-				if (options.defer?.includes(namespace)) {
-					if (namespace === "trigger") parts.push({ trigger: keys });
-					else parts.push({ literal: match[0] });
-				} else {
-					const found = readBinding(namespace, keys, bindings);
-					if (whole) {
-						wholeValue = found;
-						boundWhole = true;
-					} else parts.push({ literal: textValue(found, match[1]) });
-				}
-				cursor = match.index + match[0].length;
-			}
-			if (boundWhole) return wholeValue;
-			if (cursor === 0) return item;
-			if (cursor < item.length) parts.push({ literal: item.slice(cursor) });
-			if (parts.some((part) => "trigger" in part)) triggerBindings.push({
-				path,
-				mode: whole ? "value" : "text",
-				parts
-			});
-			return pendingText(parts);
-		}
-		if (!item || typeof item !== "object") return item;
-		if (visiting.has(item)) throw new ValidationError("graph parameters: cyclic data is not JSON");
-		visiting.add(item);
-		const bound = Array.isArray(item) ? item.map((child, index) => bind(child, [...path, index])) : Object.fromEntries(Object.entries(item).map(([key, child]) => [key, bind(child, [...path, key])]));
-		visiting.delete(item);
-		return bound;
-	};
-	return {
-		value: bind(value, []),
-		triggerBindings
-	};
-}
-/** Legacy authored-data binding. Compiled graphs use bindCompiledGraphTriggers instead. */
-function bindGraphParameters(value, bindings, options = {}) {
-	return compileGraphParameters(value, bindings, options).value;
-}
-/** Check provenance against the exact provisional values without reading trigger data. */
-function assertGraphTriggerBindings(value, slots) {
-	const seen = /* @__PURE__ */ new Set();
-	for (const slot of graphTriggerBindingsSchema.parse(slots)) {
-		const key = JSON.stringify(slot.path.map(String));
-		if (seen.has(key)) throw new ValidationError("graph parameters: duplicate trigger binding path");
-		seen.add(key);
-		let found = value;
-		for (const key of slot.path) {
-			if (!found || typeof found !== "object" || !Object.hasOwn(found, key)) throw new ValidationError("graph parameters: trigger binding path does not exist");
-			found = found[key];
-		}
-		if (found !== pendingText(slot.parts)) throw new ValidationError("graph parameters: trigger binding does not match its provisional value");
-	}
-}
-/** Only explicitly recorded authored slots bind. Literal parameter/trigger values are untouched. */
-function bindCompiledGraphTriggers(value, slots, trigger) {
-	assertGraphTriggerBindings(value, slots);
-	const bound = structuredClone(value);
-	for (const slot of slots) {
-		let parent = bound;
-		for (const key of slot.path.slice(0, -1)) parent = parent[key];
-		parent[slot.path.at(-1)] = slot.mode === "value" ? readBinding("trigger", slot.parts[0].trigger, { trigger }) : slot.parts.map((part) => "literal" in part ? part.literal : textValue(readBinding("trigger", part.trigger, { trigger }), `trigger.${part.trigger.join(".")}`)).join("");
-	}
-	return bound;
-}
-// src/runtime/supervise/graph-registry.ts
-/**
-* `graph-registry` — the designer's memory: graphs and their outcomes as files.
-*
-* The AgentGraph algebra makes a graph PLAIN DATA (nodes with pinned profiles,
-* edges with registry-versioned directives, a budget, a deliverable
-* description), which is the property that lets a graph be stored, replayed
-* byte-identical, and mutated like code. This module is the thin durable layer
-* on top: one JSONL record per run, the exact graph content-addressed beside
-* it. The natural home is a SANDBOX WORKSPACE — the platform's snapshot story
-* (Firecracker restore, warm leases, `continuity: 'resume'`) then makes the
-* registry the agent's compounding execution memory across runs: a rerun over
-* the same sandbox finds every graph the designer ever ran, what each cost,
-* and whether it delivered.
-*
-* ORACLES STAY ENVIRONMENT-OWNED. `DeliverableSpec.check` is a function and is
-* deliberately NOT stored: a stored graph keeps the deliverable's `describe`
-* and an optional `checkRef`, and replay re-binds the check from the caller's
-* environment. This is the graph contract's own doctrine — graders are
-* environment, never workers — applied to persistence.
-*
-* Scoring is a documented heuristic, not a learned model: delivered beats
-* failed, then cheaper (tokens, then iterations), then most recent. A designer
-* that needs better selection replaces `pickBest`, not the records.
-*/
-var graph_registry_exports = /* @__PURE__ */ __exportAll({
-	digestOfGraph: () => digestOfGraph,
-	graphCorpusSummary: () => graphCorpusSummary,
-	graphDigest: () => graphDigest,
-	graphFromStored: () => graphFromStored,
-	graphRegistry: () => graphRegistry,
-	graphRunsFor: () => graphRunsFor,
-	listGraphRuns: () => listGraphRuns,
-	loadGraph: () => loadGraph,
-	lookupGraph: () => lookupGraph,
-	pickBestGraph: () => pickBestGraph,
-	recordGraphRun: () => recordGraphRun,
-	recordStoredGraphRun: () => recordStoredGraphRun,
-	storedGraphDigests: () => storedGraphDigests,
-	taskShapeDigest: () => taskShapeDigest
-});
-const RECORDS_FILE = "records.jsonl";
-const GRAPHS_DIR = "graphs";
-/** Canonical serialization for content-addressing: stable key order, sorted. */
-function canonicalJson$1(value) {
-	if (Array.isArray(value)) return `[${value.map(canonicalJson$1).join(",")}]`;
-	if (value && typeof value === "object") return `{${Object.entries(value).filter(([, v]) => v !== void 0).sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0).map(([k, v]) => `${JSON.stringify(k)}:${canonicalJson$1(v)}`).join(",")}}`;
-	return JSON.stringify(value);
-}
-/** Digest of the exact graph (nodes + edges + budget + deliverable describe, and a flow graph's
-*  entry and gates). An absent key is not serialized, so a graph without `entry` keeps the digest
-*  it had before flow graphs were stored. */
-function graphDigest(graph) {
-	return sha256(canonicalJson$1(graph));
-}
-/** Digest of the normalized task shape a designer looks records up by. */
-function taskShapeDigest(taskShape) {
-	return sha256(canonicalJson$1(taskShape));
-}
-/** Digest of a runnable graph exactly as the registry stores it — the value
-*  `recordGraphRun` demands. Callers recording real runs hash through this,
-*  never hand-rolled, so a record always matches its graph. */
-function digestOfGraph(graph) {
-	return storeGraph(graph).digest;
-}
-function storeGraph(graph) {
-	const { describe, checkRef, command, when } = graph.deliverable;
-	const content = {
-		nodes: graph.nodes,
-		edges: graph.edges,
-		budget: graph.budget,
-		...graph.triggerBindings === void 0 ? {} : { triggerBindings: graph.triggerBindings },
-		deliverable: {
-			...describe ? { describe } : {},
-			...checkRef ? { checkRef } : {},
-			...command ? { command } : {},
-			...when ? { when } : {}
-		},
-		...graph.entry === void 0 ? {} : { entry: graph.entry },
-		...graph.gates === void 0 ? {} : { gates: graph.gates }
-	};
-	return {
-		digest: graphDigest(content),
-		...content
-	};
-}
-function assertRecord(record) {
-	if (typeof record.graphDigest !== "string" || record.graphDigest.length === 0) throw new ValidationError("graph-registry: record.graphDigest is required");
-	if (typeof record.taskDigest !== "string" || record.taskDigest.length === 0) throw new ValidationError("graph-registry: record.taskDigest is required");
-	if (!Number.isFinite(Date.parse(record.startedAt))) throw new ValidationError("graph-registry: record.startedAt must be a timestamp");
-	if (![
-		"delivered",
-		"no-winner",
-		"unknown",
-		"running"
-	].includes(record.outcome.kind)) throw new ValidationError("graph-registry: invalid record.outcome.kind");
-	if ((record.outcome.kind === "delivered" || record.outcome.kind === "no-winner") && (!record.finishedAt || !Number.isFinite(Date.parse(record.finishedAt)))) throw new ValidationError("graph-registry: terminal outcomes require record.finishedAt");
-	if ((record.outcome.kind === "unknown" || record.outcome.kind === "running") && !record.outcome.reason) throw new ValidationError("graph-registry: incomplete outcomes require a reason");
-	if (record.source && (!record.source.kind || !record.source.id)) throw new ValidationError("graph-registry: source.kind and source.id are required");
-	if (record.finishedAt && (!Number.isFinite(Date.parse(record.finishedAt)) || Date.parse(record.finishedAt) < Date.parse(record.startedAt))) throw new ValidationError("graph-registry: finishedAt precedes startedAt or is invalid");
-	for (const [channel, value] of Object.entries(record.cost)) if (value !== void 0 && (typeof value !== "number" || !Number.isFinite(value) || value < 0)) throw new ValidationError(`graph-registry: invalid cost.${channel}`);
-}
-function recordKey(record) {
-	assertRecord(record);
-	if (record.source) return JSON.stringify([
-		"source",
-		record.source.kind,
-		record.source.id
-	]);
-	return JSON.stringify([
-		record.taskDigest,
-		record.graphDigest,
-		record.startedAt
-	]);
-}
-/** Open (or lazily create) a registry rooted at a workspace directory. The
-*  directory is the sandbox workspace; snapshots carry it across runs. */
-function graphRegistry(root) {
-	if (!root || root.trim().length === 0) throw new ValidationError("graphRegistry: root directory is required");
-	return { root };
-}
-/** Append one run record; the exact graph is content-addressed beside it.
-*  Idempotent per (taskDigest, graphDigest, startedAt): a replayed append with
-*  the same key replaces the prior row rather than duplicating it. */
-async function recordGraphRun(reg, graph, record) {
-	return recordStoredGraphRun(reg, storeGraph(graph), record);
-}
-/** Store an executable graph or an observed external topology in the same registry.
-* Imported observations retain their source identity and never authorize replay.
-* A reader refreshing facts can preserve independently joined labels; an explicit
-* correction leaves preserveLabels unset and replaces the record. */
-async function recordStoredGraphRun(reg, definition, record, options = {}) {
-	const { digest, ...content } = definition;
-	const stored = {
-		...content,
-		digest: digest ?? graphDigest(content)
-	};
-	if (stored.observed && !record) throw new ValidationError("graph-registry: observed graphs require a source run identity");
-	if (record) {
-		assertRecord(record);
-		if (stored.observed && !record.source) throw new ValidationError("graph-registry: observed graphs require a source run identity");
-		if (!stored.observed && !record.finishedAt) throw new ValidationError("graph-registry: native graph runs require a completion timestamp");
-		if ((!stored.observed || record.traversals !== void 0) && (!Number.isSafeInteger(record.traversals) || record.traversals < 0)) throw new ValidationError("graph-registry: native graphs require metered traversals; observed counts must be non-negative integers");
-		if (stored.digest !== record.graphDigest) throw new ValidationError(`graph-registry: record.graphDigest ${record.graphDigest} does not match the supplied graph (${stored.digest}) — record the graph that actually ran`);
-	}
-	if (graphDigest(content) !== stored.digest) throw new ValidationError("graph-registry: stored graph content does not match its digest");
-	await mkdir(join(reg.root, GRAPHS_DIR), { recursive: true });
-	const file = join(reg.root, RECORDS_FILE);
-	return withJsonlFileLock(file, async (canonicalPath) => {
-		if (!record) {
-			await persistGraph(reg, stored);
-			return stored;
-		}
-		let persisted = record;
-		if (options.preserveLabels && record.source) {
-			const prior = (await readCommittedJsonFile(canonicalPath)).find((row) => row.source?.kind === record.source.kind && row.source.id === record.source.id);
-			if (prior) {
-				const taskType = record.taskType ?? prior.taskType;
-				const priorTerminal = prior.outcome.kind === "delivered" || prior.outcome.kind === "no-winner";
-				const incomingUnassessed = record.outcome.kind === "unknown" || record.outcome.kind === "running";
-				if (priorTerminal && incomingUnassessed && prior.startedAt !== record.startedAt) throw new ValidationError("graph-registry: preserving labels requires the same task start and source identity");
-				const evidence = [...prior.evidence ?? [], ...record.evidence ?? []];
-				persisted = {
-					...record,
-					...taskType ? { taskType } : {},
-					...record.unknowns ? { unknowns: record.unknowns.filter((reason) => !(taskType && reason === "task type not explicitly labeled")) } : {},
-					...evidence.length ? { evidence: [...new Map(evidence.map((entry) => [canonicalJson$1(entry), entry])).values()] } : {},
-					...priorTerminal && incomingUnassessed ? {
-						outcome: prior.outcome,
-						finishedAt: prior.finishedAt,
-						cost: {
-							...record.cost,
-							...prior.cost.ms === void 0 ? {} : { ms: prior.cost.ms },
-							...prior.cost.mergeMs === void 0 ? {} : { mergeMs: prior.cost.mergeMs }
-						}
-					} : {}
-				};
-			}
-		}
-		assertRecord(persisted);
-		await persistGraph(reg, stored);
-		await upsertCommittedJsonLine(canonicalPath, persisted, recordKey);
-		return stored;
-	});
-}
-async function persistGraph(reg, stored) {
-	const revisionPath = join(reg.root, GRAPHS_DIR, `${stored.digest}.json`);
-	try {
-		const { digest: existingDigest, ...existing } = JSON.parse(await readFile(revisionPath, "utf8"));
-		if (existingDigest !== stored.digest || graphDigest(existing) !== stored.digest) throw new ValidationError("graph-registry: stored graph revision is immutable but its content differs");
-	} catch (error) {
-		if (!isNoEntError(error)) throw error;
-		writeAtomicDurableFile(revisionPath, JSON.stringify(stored), { preserveMode: true });
-	}
-}
-/** All records, newest last. */
-async function listGraphRuns(reg) {
-	return readCommittedJsonFile(join(reg.root, RECORDS_FILE));
-}
-function observedTopology(record) {
-	return record.topologyDigest ?? (record.source ? "unknown" : record.graphDigest);
-}
-/** Records for one task shape or deterministic label query, newest last. */
-async function graphRunsFor(reg, query = {}) {
-	const filters = typeof query === "string" ? { taskDigest: query } : query;
-	return (await listGraphRuns(reg)).filter((row) => (filters.taskDigest === void 0 || row.taskDigest === filters.taskDigest) && (filters.taskType === void 0 || (row.taskType ?? "unknown") === filters.taskType) && (filters.topologyDigest === void 0 || observedTopology(row) === filters.topologyDigest) && (filters.sourceKind === void 0 || (row.source?.kind ?? "native") === filters.sourceKind));
-}
-function medianKnown(values) {
-	const known = values.filter((value) => value !== void 0 && Number.isFinite(value) && value >= 0).sort((a, b) => a - b);
-	const middle = Math.floor(known.length / 2);
-	return {
-		count: known.length,
-		median: known.length === 0 ? null : known.length % 2 ? known[middle] : (known[middle - 1] + known[middle]) / 2
-	};
-}
-function observedGraphSummary(records) {
-	const groups = /* @__PURE__ */ new Map();
-	for (const record of records) {
-		const key = JSON.stringify([record.taskType ?? "unknown", observedTopology(record)]);
-		const rows = groups.get(key);
-		if (rows) rows.push(record);
-		else groups.set(key, [record]);
-	}
-	const summaries = [...groups.values()].map((runs) => {
-		const assessed = runs.filter((run) => run.outcome.kind === "delivered" || run.outcome.kind === "no-winner");
-		const delivered = assessed.filter((run) => run.outcome.kind === "delivered");
-		const wall = medianKnown(assessed.map((run) => run.cost.ms));
-		const merge = medianKnown(delivered.filter((run) => run.evidence?.some((entry) => entry.kind === "pr-merged")).map((run) => run.cost.mergeMs));
-		const tokens = medianKnown(assessed.map((run) => run.cost.tokens));
-		const human = medianKnown(assessed.map((run) => run.cost.humanMessages));
-		return {
-			taskType: runs[0].taskType ?? "unknown",
-			topologyDigest: observedTopology(runs[0]),
-			delivered: delivered.length,
-			assessed: assessed.length,
-			unknown: runs.length - assessed.length,
-			deliveredRate: assessed.length ? delivered.length / assessed.length : null,
-			medianWallMs: wall.median,
-			wallMsCount: wall.count,
-			medianMergeMs: merge.median,
-			mergeMsCount: merge.count,
-			medianTokens: tokens.median,
-			tokenCount: tokens.count,
-			medianHumanMessages: human.median,
-			humanMessageCount: human.count,
-			runs
-		};
-	});
-	summaries.sort((a, b) => {
-		const delivered = (b.deliveredRate ?? -1) - (a.deliveredRate ?? -1);
-		if (delivered) return delivered;
-		for (const key of [
-			"medianWallMs",
-			"medianTokens",
-			"medianHumanMessages"
-		]) {
-			if (a[key] === b[key]) continue;
-			if (a[key] === null) return 1;
-			if (b[key] === null) return -1;
-			return a[key] - b[key];
-		}
-		return a.taskType.localeCompare(b.taskType) || a.topologyDigest.localeCompare(b.topologyDigest);
-	});
-	return {
-		recordCount: records.length,
-		groups: summaries
-	};
-}
-/** Query and rank the same registry records using the opt-in observational
-* policy: delivery rate, wall time, tokens, then human messages; unknowns last. */
-async function graphCorpusSummary(reg, query = {}) {
-	return observedGraphSummary(await graphRunsFor(reg, query));
-}
-/** The documented heuristic: delivered beats failed; among delivered, cheaper
-*  (tokens, then iterations) wins; ties go to the most recent. */
-function pickBestGraph(records, options = {}) {
-	if (options.policy === "observed") {
-		const group = observedGraphSummary(records).groups[0];
-		return group && pickBestGraph(group.runs);
-	}
-	const delivered = records.filter((row) => row.outcome.kind === "delivered");
-	if (delivered.length === 0) return void 0;
-	const better = (a, b) => {
-		const aTokens = a.cost.tokens ?? Number.POSITIVE_INFINITY;
-		const bTokens = b.cost.tokens ?? Number.POSITIVE_INFINITY;
-		if (aTokens !== bTokens) return aTokens < bTokens ? a : b;
-		const aIter = a.cost.iterations ?? Number.POSITIVE_INFINITY;
-		const bIter = b.cost.iterations ?? Number.POSITIVE_INFINITY;
-		if (aIter !== bIter) return aIter < bIter ? a : b;
-		return a.finishedAt >= b.finishedAt ? a : b;
-	};
-	return delivered.reduce((best, row) => better(best, row) === best ? best : row);
-}
-/** Load a stored graph by digest. */
-async function loadGraph(reg, digest) {
-	try {
-		return JSON.parse(await readFile(join(reg.root, GRAPHS_DIR, `${digest}.json`), "utf8"));
-	} catch {
-		return;
-	}
-}
-/** The designer's lookup: replay the known-good graph for this task shape, or
-*  author a new one — with the reason stated either way (the decision is data). */
-async function lookupGraph(reg, taskDigest) {
-	const records = await graphRunsFor(reg, taskDigest);
-	const candidates = [];
-	const loaded = /* @__PURE__ */ new Map();
-	for (const record of records) {
-		if (!loaded.has(record.graphDigest)) loaded.set(record.graphDigest, await loadGraph(reg, record.graphDigest));
-		if (!loaded.get(record.graphDigest)?.observed) candidates.push(record);
-	}
-	if (records.length && !candidates.length) return {
-		kind: "author",
-		reason: "only observed topologies are available; author an executable graph"
-	};
-	const best = pickBestGraph(candidates);
-	if (best) {
-		const graph = await loadGraph(reg, best.graphDigest);
-		if (graph) return {
-			kind: "replay",
-			graph,
-			record: best
-		};
-		return {
-			kind: "author",
-			reason: `best record's graph ${best.graphDigest.slice(0, 12)} is missing from the registry`
-		};
-	}
-	return {
-		kind: "author",
-		reason: records.length === 0 ? "first run for this task shape" : "no graph delivered for this task shape yet"
-	};
-}
-/** Rehydrate a stored graph, binding trigger data and an environment-owned named check. */
-function graphFromStored(stored, environment = {}) {
-	if (stored.observed) throw new ValidationError("graphFromStored: observed topology cannot be replayed");
-	const { digest: _digest, observed: _observed, triggerBindings: _triggerBindings, deliverable, ...topology } = stored.triggerBindings !== void 0 ? bindCompiledGraphTriggers(stored, stored.triggerBindings, typeof environment === "function" ? void 0 : environment.trigger ?? {}) : typeof environment === "function" ? stored : bindGraphParameters(stored, { trigger: environment.trigger ?? {} });
-	const selected = typeof environment === "function" ? environment : environment.checks && Object.hasOwn(environment.checks, deliverable.checkRef ?? "") ? environment.checks[deliverable.checkRef] : deliverable.checkRef === "command" ? deliverable.command : deliverable.checkRef === "route" && deliverable.when ? ((out, context) => context ? context.originalVerdict?.valid !== false : checkGraphRoute(deliverable.when, out)) : void 0;
-	if (!selected) throw new ValidationError(`graphFromStored: unknown checkRef ${deliverable.checkRef ?? "(missing)"}`);
-	const materialized = stored.triggerBindings === void 0 ? {} : { triggerBindings: [] };
-	if (typeof selected === "function") {
-		const { command: _command, ...description } = deliverable;
-		return {
-			...topology,
-			...materialized,
-			deliverable: {
-				...description,
-				check: selected
-			}
-		};
-	}
-	const command = selected === deliverable.command ? selected : bindGraphParameters(selected, { trigger: environment.trigger ?? {} });
-	return {
-		...topology,
-		...materialized,
-		deliverable: {
-			...deliverable,
-			command,
-			check: () => false
-		}
-	};
-}
-/** Digests present on disk (integrity probe for tests and audits). */
-async function storedGraphDigests(reg) {
-	try {
-		return (await readdir(join(reg.root, GRAPHS_DIR))).filter((name) => name.endsWith(".json")).map((name) => name.slice(0, -5)).sort();
-	} catch {
-		return [];
-	}
-}
 // src/runtime/supervise/supervise-graph-subtasks.ts
 /** A stored graph's topology, from the registry `SuperviseOptions.graphRegistry` names. */
 async function storedGraphTopology(dir, digest) {
@@ -9701,7 +9091,10 @@ function prepareSuperviseRun(profile, task, opts, testBrain) {
 	const { applyTraceTools, composeSpawnProfile } = traceToolPolicy(options, guidanceComposer);
 	const peerAuditFor = peerAuditRegistry(options);
 	const registeredProfile = applyTraceTools(superviseRootProfile(profile, options.profileGuidance));
-	const canonicalProfile = admitRootSegment(registeredProfile, options);
+	if (options.segment !== void 0) admitSegment(options.segment);
+	const canonicalProfile = options.segment === void 0 ? registeredProfile : withRootSegment(registeredProfile, options.segment);
+	if (!testBrain || !isRuntimeFlowBrain(testBrain)) assertExecutableAgentProfile(canonicalProfile, "supervise root");
+	if (authoredSeatStages(canonicalProfile) !== void 0 && options.selectSeat === void 0) throw new ValidationError("supervise: AgentProfile.seats requires selectSeat before execution");
 	const canonicalTask = freezeDetached(task);
 	assertWorkerSeams(options);
 	const authorizeDownFor = downMessageAuthorizer(options);
@@ -9832,14 +9225,6 @@ function peerAuditRegistry(options) {
 		}
 	} : void 0;
 }
-/** The profile this process executes: the registered root, or the segment the options name. */
-function admitRootSegment(registeredProfile, options) {
-	if (options.segment !== void 0) admitSegment(options.segment);
-	const canonicalProfile = options.segment === void 0 ? registeredProfile : withRootSegment(registeredProfile, options.segment);
-	assertExecutableAgentProfile(canonicalProfile, "supervise root");
-	if (authoredSeatStages(canonicalProfile) !== void 0 && options.selectSeat === void 0) throw new ValidationError("supervise: AgentProfile.seats requires selectSeat before execution");
-	return canonicalProfile;
-}
 function assertWorkerSeams(options) {
 	if (options.makeWorkerAgent && options.authorizeSpawn) throw new ValidationError("supervise: authorizeSpawn cannot be combined with caller-owned makeWorkerAgent; use makeLeafAgent to override leaf execution inside the authorized path, or use backend-derived workers");
 	if (options.makeWorkerAgent && options.makeLeafAgent) throw new ValidationError("supervise: makeWorkerAgent replaces the worker path and makeLeafAgent overrides a leaf inside it; pass one");
@@ -10205,6 +9590,6 @@ function superviseWithContext(profile, task, opts, brain) {
 		...signal === void 0 ? {} : { signal }
 	}, brain));
 }
-export { delegatesWorkerBriefPrompt as $, graphRouteWhenSchema as A, runtimeFlowBrain as B, storedGraphDigests as C, compileGraphParameters as D, bindGraphParameters as E, composeReentryTask as F, journaledGateDecider as G, GraphRouteError as H, serveCoordinationMcp as I, defaultEdgeTraversalCap as J, routeFlowOf as K, coordinationControlToolNames as L, supervisorAgent as M, supervisorAgentWithTestBrain as N, graphTriggerBindingsSchema as O, UNPROVEN_CONTINUITY as P, createPromptRegistry as Q, driverAgent as R, recordStoredGraphRun as S, assertGraphTriggerBindings as T, createFlowRun as U, createGraphOverlay as V, flowRootProfile as W, validateGraphTopology as X, graphRootProfile as Y, analyzesFindingsReportPrompt as Z, listGraphRuns as _, createSupervisorSpanRecorder as _t, superviseRootProfile as a, promptHandle as at, pickBestGraph as b, retryPreSpawnRefusals as c, noProgressFor as ct, graphCorpusSummary as d, areaUnderCurve as dt, dumbContinuationFailPrompt as et, graphDigest as f, bestSoFar as ft, graph_registry_exports as g, readRootStreamReceipt as gt, graphRunsFor as h, readRootStream as ht, profileGuidanceComposer as i, naiveContinuationPrompt as it, workerFromBackend as j, graphFileSchema as k, withWorkerSpawnRetry as l, plateau as lt, graphRegistry as m, renderAnytimeTable as mt, superviseFleetCapabilities as n, formatPromptHandle as nt, isPreSpawnExecutorFailure as o, allWorkersStalled as ot, graphFromStored as p, plateauLength as pt, validateFlowGraph as q, superviseWithTestBrain as r, kernelPromptRegistry as rt, resolveWorkerSpawnRetry as s, anyOf as st, supervise as t, dumbContinuationPassPrompt as tt, digestOfGraph as u, anytimeReport as ut, loadGraph as v, taskShapeDigest as w, recordGraphRun as x, lookupGraph as y, runBrainLoop as z };
+export { createPromptRegistry as A, noProgressFor as B, journaledGateDecider as C, graphRootProfile as D, defaultEdgeTraversalCap as E, kernelPromptRegistry as F, plateauLength as G, anytimeReport as H, naiveContinuationPrompt as I, readRootStreamReceipt as J, renderAnytimeTable as K, promptHandle as L, dumbContinuationFailPrompt as M, dumbContinuationPassPrompt as N, validateGraphTopology as O, formatPromptHandle as P, allWorkersStalled as R, flowRootProfile as S, validateFlowGraph as T, areaUnderCurve as U, plateau as V, bestSoFar as W, createSupervisorSpanRecorder as Y, driverAgent as _, superviseRootProfile as a, GraphRouteError as b, retryPreSpawnRefusals as c, supervisorAgent as d, supervisorAgentWithTestBrain as f, coordinationControlToolNames as g, serveCoordinationMcp as h, profileGuidanceComposer as i, delegatesWorkerBriefPrompt as j, analyzesFindingsReportPrompt as k, withWorkerSpawnRetry as l, composeReentryTask as m, superviseFleetCapabilities as n, isPreSpawnExecutorFailure as o, UNPROVEN_CONTINUITY as p, readRootStream as q, superviseWithTestBrain as r, resolveWorkerSpawnRetry as s, supervise as t, workerFromBackend as u, runBrainLoop as v, routeFlowOf as w, createFlowRun as x, createGraphOverlay as y, anyOf as z };
 
-//# sourceMappingURL=supervise-BXw89Ajc.js.map
+//# sourceMappingURL=supervise-Cl0F57m9.js.map