@tangle-network/agent-runtime 1.0.0 → 2.0.2

package/dist/{supervisor-hHU3ZJnR.js → supervisor-L7u3pQ1j.js}

@@ -1,9 +1,11 @@
-import { $ as traceRootWriter, A as runtimeProviderCode, At as sandboxLeafOutputFromEvents, B as retainedExecutorContext, Bt as createSandboxUsageLedger, D as runtimeFailureCause, Dt as createSandboxToolPartState, E as reportedFailureCause, Et as assertValidSpend, F as executorEvidenceWriter, Ft as extractTransportEventIdentity, Gt as sandboxTerminalUsageField, H as workspaceCaptureWriter, Ht as isSandboxTerminalEvent, I as isProvisioningRefusal, It as parseCanonicalTransportEvent, Jt as parseCodexUsageRecord, L as leafContinuationExecutionId, Lt as assertSandboxServedModel, M as BUDGET_CONTINUATION_TASK, Mt as sandboxProgressEvents, N as DISPATCH_NOT_ADMITTED_CODE, P as RetainedExecutionPendingError, R as prepareRetainedExecutor, Rt as canonicalSandboxUsageMode, St as newUsageTotals, T as sha256, U as UNAVAILABLE_CODES, Ut as notifySandboxEventObserver, V as retainedExecutorSeamKey, W as UNAVAILABLE_STATUSES, Wt as sandboxEventServedBackend, X as unavailableSignalOfFailure, Y as unavailableSignalInText, Yt as recordValue, _ as publishExclusiveDurableFile, a as isNoEntError, at as executorFailure, b as captureRunWriteContext, bt as createBudgetPool, ct as hashJson, d as SpawnEventIndex, dt as causeChain, f as closesCursorSlot, ft as errMessage, g as assertNoSymlinkDescendant, gt as defaultRedactor, ht as errorText, it as contentRef, j as settlementFailureCause, jt as sandboxOutputMarker, k as runtimeFailureRemediationSchema, lt as credentialCommandExit, m as outsideCursorNamespace, mt as errorProperty, n as appendSpawnEvents, nt as shareParsedStrings, ot as executorFailureInfra, p as insideCursorNamespace, pt as errorHttpStatus, q as unavailablePauseMs, r as spawnJournalRecordEvents, rt as contentAddress, st as executorFailureReason, t as FileSpawnJournal, tt as detachedSnapshot, ut as isCredentialRefusal, vt as resolveRedactor, wt as spendFromUsageTotals, x as fenceRunWrite, xt as meterUsageEvent, y as writeAtomicDurableFile, yt as BudgetReconcileFault, zt as createSandboxTurnEventCollector } from "./journal-store-BJPMUydp.js";
 import { c as RetainedInteractiveAdmissionError, d as RetainedRunDispatchBindingError, f as RuntimeRunStateError, i as ConfigError, l as RetainedInteractiveBindingError, m as ValidationError$1, r as BackendTransportError, t as AgentEvalError$1, u as RetainedRunAdmissionError } from "./errors-AzSuGI23.js";
-import { A as ACCEPTED_RESULT_GRACE_MS, B as teardownExecutor, C as withTimeout, E as addResourceSpend, F as armDeadlineTimer, I as boundedChildDeadlineAt, L as checkInIdleMs, O as resourceTelemetry, P as ROOT_DEADLINE_REASON, R as isDeadlineAbortReason, S as unmeteredSpend, T as zeroTokenUsage, V as teardownSurfaces, _ as roundBoxMinutes, a as cloneSpend, b as throwAbort, c as errorMessage, d as isAbortError$1, f as isAsyncIterable, g as randomUuid, h as randomSuffix, i as chargedTokens, j as CHILD_DEADLINE_REASON, k as withBudgetResources, m as promptCacheTokenClasses, n as addSpend, o as cloneTokenUsage, p as mapWithConcurrency, r as addTokenUsage, s as deleteBoxSafe, t as abortError, v as sleep, w as zeroSpend, x as throwIfAborted, y as stringifySafe, z as singleFlightTeardown } from "./util-ebWMWzY0.js";
-import { runTaskQueue } from "./task-queue.js";
+import { A as ACCEPTED_RESULT_GRACE_MS, B as teardownExecutor, C as withTimeout, E as addResourceSpend, F as armDeadlineTimer, I as boundedChildDeadlineAt, L as checkInIdleMs, O as resourceTelemetry, P as ROOT_DEADLINE_REASON, R as isDeadlineAbortReason, S as unmeteredSpend, T as zeroTokenUsage, V as teardownSurfaces, _ as roundBoxMinutes, a as cloneSpend, b as throwAbort, c as errorMessage, d as isAbortError$1, f as isAsyncIterable, g as randomUuid, h as randomSuffix, i as chargedTokens, j as CHILD_DEADLINE_REASON, k as withBudgetResources, m as promptCacheTokenClasses, n as addSpend, o as cloneTokenUsage, p as mapWithConcurrency, r as addTokenUsage, s as deleteBoxSafe, t as abortError, v as sleep, w as zeroSpend, x as throwIfAborted, y as stringifySafe, z as singleFlightTeardown } from "./util-BX20UJ9X.js";
+import { t as runTaskQueue } from "./task-queue-DbpZAp6C.js";
+import { $ as newUsageTotals, A as workspaceCaptureWriter, C as executorEvidenceWriter, E as prepareRetainedExecutor, Et as recordValue, F as unavailablePauseMs, G as executorFailureInfra, H as contentAddress, J as credentialCommandExit, K as executorFailureReason, L as unavailableSignalInText, M as UNAVAILABLE_STATUSES, O as retainedExecutorContext, Q as meterUsageEvent, R as unavailableSignalOfFailure, S as RetainedExecutionPendingError, St as sandboxTerminalUsageField, T as leafContinuationExecutionId, Tt as parseCodexUsageRecord, U as contentRef, V as traceRootWriter, W as executorFailure, X as BudgetReconcileFault, Y as isCredentialRefusal, Z as createBudgetPool, _ as runtimeFailureRemediationSchema, _t as createSandboxUsageLedger, a as encodeResultBlob, b as BUDGET_CONTINUATION_TASK, bt as notifySandboxEventObserver, c as insideCursorNamespace, ct as sandboxOutputMarker, ft as extractTransportEventIdentity, gt as createSandboxTurnEventCollector, h as runtimeFailureCause, ht as canonicalSandboxUsageMode, it as createSandboxToolPartState, j as UNAVAILABLE_CODES, k as retainedExecutorSeamKey, l as outsideCursorNamespace, lt as sandboxProgressEvents, m as reportedFailureCause, mt as assertSandboxServedModel, n as appendSpawnEvents, o as SpawnEventIndex, pt as parseCanonicalTransportEvent, q as hashJson, r as spawnJournalRecordEvents, rt as assertValidSpend, s as closesCursorSlot, st as sandboxLeafOutputFromEvents, t as FileSpawnJournal, tt as spendFromUsageTotals, u as FileObserverJournal, v as runtimeProviderCode, w as isProvisioningRefusal, x as DISPATCH_NOT_ADMITTED_CODE, xt as sandboxEventServedBackend, y as settlementFailureCause, yt as isSandboxTerminalEvent } from "./journal-store-BpCOCDoO.js";
+import { _ as errorText, b as resolveRedactor, d as detachedSnapshot, f as shareParsedStrings, g as errorProperty, h as errorHttpStatus, l as sha256, m as errMessage, p as causeChain, v as defaultRedactor } from "./jsonl-file-BBP9Dz9w.js";
 import { _ as agentHarness, a as concreteProfileModel, c as profileModelExecutionSettings, d as assertRouterAutoDeclaration, f as assertRouterAutoResponse, g as observedModelMatchesDeclared, h as observedModelHasSnapshot, l as profileProviderModel, m as mergeObservedModelIdentity, o as enforceTokenLimits, s as profileBridgeWireModel, t as assertExecutableAgentProfile, u as resolveRouterRetryPolicy } from "./model-policy-C-RGAUW4.js";
-import { B as sha256Bytes$1, H as hasControlCharacter, I as deepFreezeCandidate, M as verifyWorkspaceSnapshotArtifacts, U as nativeSystemPrompt, c as verifyAgentCandidateWorkspaceTree, g as verifiedArtifactChunks, o as readAgentCandidateWorkspaceArtifactFiles, s as verifyAgentCandidateWorkspaceArtifacts, t as assertSandboxProfileCompatibility, v as verifyAgentCandidateWorkspaceArchive } from "./sandbox-profile-compat-CXjozdWL.js";
+import { B as sha256Bytes$1, H as hasControlCharacter, I as deepFreezeCandidate, M as verifyWorkspaceSnapshotArtifacts, U as nativeSystemPrompt, c as verifyAgentCandidateWorkspaceTree, g as verifiedArtifactChunks, o as readAgentCandidateWorkspaceArtifactFiles, s as verifyAgentCandidateWorkspaceArtifacts, t as assertSandboxProfileCompatibility, v as verifyAgentCandidateWorkspaceArchive } from "./sandbox-profile-compat-DRiz9kME.js";
+import { a as writeAtomicDurableFile, n as assertNoSymlinkDescendant, r as publishExclusiveDurableFile, s as fenceRunWrite } from "./durable-file-DstVeHcj.js";
 import { i as notifyRuntimeHookEvent } from "./runtime-hooks-CsW2pfFk.js";
 import * as traceContract from "@tangle-network/agent-trace-contract";
 import { ATTR, OPERATION_NAME_ATTR, toW3CSpanId, toW3CTraceId } from "@tangle-network/agent-trace-contract";
@@ -357,27 +359,37 @@ function readSandboxOutcome(value) {
 	if (!outcome || typeof outcome !== "object") return void 0;
 	return outcome;
 }
+// src/runtime/supervise/flow-brain.ts
+const flowOwners = /* @__PURE__ */ new WeakSet();
+/** Runtime schedules this model-free brain under graph edge caps, pool, deadline and abort. */
+function runtimeFlowBrain() {
+	const brain = async () => ({
+		content: null,
+		toolCalls: []
+	});
+	flowOwners.add(brain);
+	return brain;
+}
+/** True only for a brain `runtimeFlowBrain` minted. */
+function isRuntimeFlowBrain(brain) {
+	return flowOwners.has(brain);
+}
+/** Carry the same unforgeable ownership through the built code driver and its spec copies. */
+function runtimeFlowAgent(agent, brain) {
+	if (brain && isRuntimeFlowBrain(brain)) flowOwners.add(agent);
+	return agent;
+}
+function isRuntimeFlowAgent(agent) {
+	return typeof agent === "object" && agent !== null && flowOwners.has(agent);
+}
 // src/runtime/supervise/executable-spec.ts
-/**
-* Parse one untrusted profile into the exact immutable value execution may consume.
-*
-* Snapshotting before schema parsing reads caller-owned fields once. Snapshotting the parsed
-* result prevents downstream custom code from changing any identity or authority field.
-*/
+/** Read untrusted fields once, then parse and seal the exact executable profile. */
 function executableAgentProfileSnapshot(raw, context) {
 	const profile = authoredAgentProfileSnapshot(raw, context);
 	assertExecutableAgentProfile(profile, context);
 	return profile;
 }
-/**
-* Parse and seal a profile as authored, without requiring it to select a harness and model.
-*
-* This is the intake for a leaf whose behavior is code the caller already built: a verbatim
-* `AgentSpec.executor`. Such an executor receives only the task and a signal, so no registry,
-* harness, or backend reads the profile after intake, and there is no ambient fill to refuse. The
-* profile still parses and still digests into the node's identity; it is simply not obliged to
-* claim a model that nothing runs. A graph script node is the canonical case.
-*/
+/** Seal code-owned behavior without inventing a model: verbatim executors and owned flow drivers. */
 function authoredAgentProfileSnapshot(raw, context) {
 	const input = detachedSnapshot(raw, `${context}: AgentProfile input`);
 	const profile = agentProfileSchema.parse(input);
@@ -386,7 +398,7 @@ function authoredAgentProfileSnapshot(raw, context) {
 /** Snapshot an executable spec while retaining trusted callbacks by reference. */
 function executableAgentSpecSnapshot(raw, context) {
 	const { profile: rawProfile, harness, execution: rawExecution, ...runtimeExtensions } = raw;
-	const profile = raw.executor === void 0 ? executableAgentProfileSnapshot(rawProfile, context) : authoredAgentProfileSnapshot(rawProfile, context);
+	const profile = raw.executor === void 0 && !isRuntimeFlowAgent(runtimeExtensions.driver) ? executableAgentProfileSnapshot(rawProfile, context) : authoredAgentProfileSnapshot(rawProfile, context);
 	const execution = rawExecution === void 0 ? void 0 : detachedSnapshot(rawExecution, `${context}: execution attribution`);
 	return Object.freeze({
 		...runtimeExtensions,
@@ -1185,13 +1197,8 @@ const CODEX_REPRODUCIBLE_ARGS = [
 const CODEX_PERMISSION_PROFILE = "agent_runtime_reproducible";
 // src/mcp/local-harness-invocation.ts
 /**
-* Default per-harness command + arg shape. `buildArgs` takes ONLY the task prompt and
-* emits the prompt-only invocation (no model, no system prompt) — the safe default shape
-* the in-process executor's `streamPrompt` drives. `modelArgs` maps a resolved model to
-* the harness's selector flag, which each harness spells for itself: codex, kimi-code and
-* opencode take `-m <model>`, claude-code and pi take `--model <model>`. The §1.5
-* profile-aware mapper `harnessInvocation` composes these to thread the full
-* supervisor-authored profile (systemPrompt + model) into argv.
+* Per-harness prompt invocation and model, effort, permission and input capabilities.
+* `harnessInvocation` composes these with the authored profile before execution.
 *
 * Every per-harness difference is a FIELD on this row, never a test on the harness name at a
 * call site: adding harness N+1 is one entry here, and a caller asking for a capability the
@@ -1209,6 +1216,7 @@ const HARNESS_INVOCATIONS = {
 	codex: {
 		command: "codex",
 		buildArgs: (taskPrompt) => ["exec", taskPrompt],
+		stdinPromptArgIndex: 1,
 		modelArgs: (model) => ["-m", model],
 		reasoningArgs: (level) => ["-c", `model_reasoning_effort="${level}"`],
 		permissionBypassArgs: () => [
@@ -2092,22 +2100,13 @@ var RollingByteCapture = class {
 	}
 };
 /**
-* Spawn a local coding harness CLI as a subprocess + collect its output.
-*
-* NOT responsible for parsing the harness's output or extracting a diff —
-* the in-process executor's `streamPrompt` orchestrates `git diff` against
-* the worktree after this resolves. This function is intentionally narrow:
-* spawn, wait, capture, return.
+* Spawn a local harness, collect output and confirm process-tree cleanup.
+* The caller owns output parsing and workspace diffs.
 *
-* Fails loud — throws when:
-*   - `cwd` doesn't exist (subprocess emits ENOENT; surfaced as Error)
-*   - the harness binary is not on PATH (ENOENT)
-*   - the caller signal was already aborted before process launch
+* Spawn failures and signals already aborted before launch reject.
 *
-* Does NOT throw when:
-*   - the subprocess exits non-zero (`result.exitCode` carries the code)
-*   - a non-reproducible subprocess is aborted / timed out (`result.aborted` /
-*     `result.timedOut` carries the reason even when a TERM-aware child exits zero)
+* Ordinary nonzero exits and cancellation return the exit code and timeout/abort flags.
+* A failed prompt delivery rejects after the child is reaped.
 *
 * Reproducible Codex additionally requires a terminal usage event. If cancellation
 * prevents that event, this rejects with `CodexExecutionDiagnosticError` instead of
@@ -2179,11 +2178,16 @@ async function runLocalHarness(options) {
 			deniedProbePaths: isolated.deniedProbePaths,
 			...options.signal ? { signal: options.signal } : {}
 		}) : void 0;
+		const inputIndex = options.codexReproducible ? void 0 : invocation.stdinPromptArgIndex;
+		const canonicalPrompt = options.invocation ? options.invocation.prompt : taskPrompt;
+		const input = inputIndex !== void 0 && args[0] === invocation.buildArgs("")[0] && args[inputIndex] === canonicalPrompt ? canonicalPrompt : void 0;
+		const stdinPrompt = input?.trim() ? input : void 0;
+		const spawnArgs = stdinPrompt === void 0 ? args : args.map((arg, index) => index === inputIndex ? "-" : arg);
 		return await new Promise((resolve, reject) => {
 			let child;
 			try {
 				options.signal?.throwIfAborted();
-				child = spawnImpl(command, args, {
+				child = spawnImpl(command, spawnArgs, {
 					cwd,
 					env,
 					stdio: "pipe",
@@ -2193,7 +2197,11 @@ async function runLocalHarness(options) {
 				reject(err instanceof Error ? err : new Error(String(err)));
 				return;
 			}
-			child.stdin?.end();
+			let deliveryError;
+			child.stdin?.on("error", (error) => {
+				deliveryError = error;
+			});
+			child.stdin?.end(stdinPrompt?.startsWith("") ? `\uFEFF${stdinPrompt}` : stdinPrompt);
 			const stdoutCapture = new RollingByteCapture(maxOutputBytes);
 			const stderrCapture = new RollingByteCapture(maxOutputBytes);
 			let timedOut = false;
@@ -2265,6 +2273,7 @@ async function runLocalHarness(options) {
 					try {
 						if (!termination && process.platform !== "win32" && typeof child.pid === "number" && processGroupExists(child.pid)) await terminate();
 						if (termination) await termination;
+						if (deliveryError && code === 0 && !timedOut && !aborted) throw deliveryError;
 						const durationMs = Date.now() - startedAt;
 						const usage = options.codexReproducible ? parseCodexTokenUsage(stdout) : void 0;
 						finalize({
@@ -2660,7 +2669,7 @@ function callerEnv(overrides) {
 */
 async function spawnProfiledHarness(args) {
 	const invocationProfile = profileWithResourceInstructions(args.profile, args.resourceInstructions);
-	const { command, args: invocationArgs } = harnessInvocation(args.harness, invocationProfile, args.taskPrompt, {
+	const invocation = harnessInvocation(args.harness, invocationProfile, args.taskPrompt, {
 		dangerouslySkipPermissions: args.dangerouslySkipPermissions,
 		...args.fullAccess ? { fullAccess: true } : {},
 		...args.codexReproducible ? { codexReproducible: true } : {}
@@ -2670,8 +2679,8 @@ async function spawnProfiledHarness(args) {
 		cwd: args.workspacePath,
 		taskPrompt: args.taskPrompt,
 		invocation: {
-			command,
-			args: [...invocationArgs, ...args.applied.flags.map(publicPlanString)]
+			...invocation,
+			args: [...invocation.args, ...args.applied.flags.map(publicPlanString)]
 		},
 		env: {
 			...callerEnv(args.env),
@@ -9819,10 +9828,16 @@ function createInPlaceCliExecutor(options) {
 				usd: 0,
 				ms: Date.now() - started
 			};
+			const exit = result.harness;
+			const failed = exit.exitCode !== 0 || exit.timedOut;
 			artifact = {
 				outRef: contentAddress(result),
 				out: result,
-				spent
+				spent,
+				...failed ? { outcome: {
+					success: false,
+					error: `${harness} exited ${exit.exitCode ?? exit.killedBySignal}${exit.timedOut ? " after its timeout" : ""}: ${exit.stderr.trim().slice(-300)}`
+				} } : {}
 			};
 			return artifact;
 		},
@@ -12320,6 +12335,7 @@ async function startRetainedRun(options) {
 	assertStableText(options.environment.idempotencyKey, "environment idempotency key");
 	assertStableText(options.turn.turnId, "turn idempotency key");
 	if (typeof options.onAdmission !== "function") throw new Error("startRetainedRun requires an awaited onAdmission durability hook");
+	const onAdmission = journaledAdmissions(options.journalRoot, options.intent?.runId, options.onAdmission);
 	const contextTransfer = retainedContextTransfer(options.turn.contextTransfer);
 	const transferReceipt = retainedContextTransferReceipt(options, options.provider.name, contextTransfer);
 	const { sessionId, executionId } = options.identity ?? options.intent ?? (transferReceipt === void 0 ? void 0 : {
@@ -12341,7 +12357,7 @@ async function startRetainedRun(options) {
 	}));
 	if (!options.provider.get) throw new Error(`provider "${options.provider.name}" cannot reconstruct an environment by id`);
 	const intent = retainedRunIntent(options, identity, contextTransfer);
-	if (options.intent === void 0) await admitDurably(options.onAdmission, intent);
+	if (options.intent === void 0) await admitDurably(onAdmission, intent);
 	else assertExactRetainedRunIntent(options.intent, intent);
 	const providerCapabilities = await assertRetainedCapabilities(options.provider);
 	if (transferReceipt !== void 0) assertRetainedContextTransferCapability(providerCapabilities);
@@ -12401,10 +12417,10 @@ async function startRetainedRun(options) {
 		contextTransfer,
 		expectedRunId: transferReceipt?.runId,
 		identity,
-		onAdmission: options.onAdmission,
+		onAdmission,
 		capabilities,
 		now: options.now,
-		preserveEnvironment: transferReceipt !== void 0 || options.existingEnvironmentId !== void 0
+		preserveEnvironment: options.preserveEnvironment === true || transferReceipt !== void 0 || options.existingEnvironmentId !== void 0
 	});
 }
 /**
@@ -12561,6 +12577,32 @@ async function admitDurably(onAdmission, admission) {
 		throw new RetainedRunAdmissionError(stableAdmission, { cause: error });
 	}
 }
+/**
+* Mirror each admission into `<journalRoot>/<runId>/observer.jsonl`, the observer format
+* agent-runtime-top reads. The caller's hook stays authoritative; an observer append that
+* fails never fails the run, matching `FileObserverJournal`'s contract.
+*/
+function journaledAdmissions(journalRoot, replayRunId, onAdmission) {
+	if (journalRoot === void 0) return onAdmission;
+	let runId = replayRunId;
+	return async (admission) => {
+		await onAdmission(admission);
+		if ("runId" in admission) runId ??= admission.runId;
+		if (runId === void 0) return;
+		await new FileObserverJournal(join(journalRoot, runId, "observer.jsonl"), runId).appendEvent({
+			id: `${runId}:${admission.phase}`,
+			pursuitId: runId,
+			runId,
+			target: "agent.run",
+			phase: "before",
+			timestamp: Date.now(),
+			payload: {
+				status: "running",
+				admission: admission.phase
+			}
+		}).catch(() => void 0);
+	};
+}
 function isInteractiveAdmission(admission) {
 	return admission.phase === "interactive_intent" || admission.phase === "interactive_environment" || admission.phase === "interactive_started";
 }
@@ -14041,6 +14083,7 @@ function retainedDispatchMaterial(args, retention, selectedTurn, signal) {
 				...selectedTurn,
 				turnId
 			},
+			preserveEnvironment: retention.preserveEnvironment,
 			...priorSession === void 0 ? {} : {
 				existingEnvironmentId: priorSession.environmentId,
 				identity: {
@@ -14070,36 +14113,11 @@ function assertReplayMaterial(args, material, intent, turn, selectedTurn, turnId
 		material.turn = original.turn;
 	}
 }
-/** Replay the committed intent, or find the session the environment admission names. */
-async function recoverFromEnvironmentAdmission(args, material, intent, environmentAdmission, onAdmission) {
-	const replay = (admission) => recoverRetainedRun({
-		provider: args.provider,
-		admission,
-		replay: material,
-		onAdmission
-	});
-	let recovered = material.existingEnvironmentId !== void 0 && intent?.phase === "intent" ? await replay(intent) : await recoverRetainedRun({
-		provider: args.provider,
-		environmentId: environmentAdmission.environmentId,
-		sessionId: environmentAdmission.sessionId,
-		executionId: environmentAdmission.executionId
-	});
-	if (recovered.outcome === "unverifiable" && intent?.phase === "intent") recovered = await replay(intent);
-	if (recovered.outcome !== "recovered") throw new Error(`retained provider execution is ${recovered.outcome}`);
-	await onAdmission({
-		phase: "dispatched",
-		controlRef: recovered.handle.controlRef,
-		idempotencyKey: environmentAdmission.idempotencyKey,
-		turnId: environmentAdmission.turnId
-	});
-	return recovered.handle;
-}
 /** Reconnect, recover or start the retained run, whichever the journal's admissions call for. */
 async function acquireRetainedHandle(args, retention, material, onAdmission, turnInputs) {
 	const admissions = retention.admissions;
 	const dispatched = [...admissions].reverse().find((admission) => admission.phase === "dispatched");
 	const intent = admissions.find((admission) => admission.phase === "intent");
-	const environmentAdmission = admissions.find((admission) => admission.phase === "environment");
 	if (args.recovering && admissions.length > 0) {
 		if (!intent) throw new Error("retained provider execution has no original intent");
 		assertReplayMaterial(args, material, intent, turnInputs.turn, turnInputs.selectedTurn, turnInputs.turnId);
@@ -14112,7 +14130,6 @@ async function acquireRetainedHandle(args, retention, material, onAdmission, tur
 		if (!reconnected) throw new Error("retained provider environment is unavailable");
 		return reconnected;
 	}
-	if (args.recovering && environmentAdmission?.phase === "environment") return recoverFromEnvironmentAdmission(args, material, intent, environmentAdmission, onAdmission);
 	if (args.recovering && intent?.phase === "intent") {
 		const recovered = await recoverRetainedRun({
 			provider: args.provider,
@@ -20371,75 +20388,6 @@ function createExecutorRegistry() {
 		}
 	};
 }
-// src/durable/spawn-journal/result-blob-store.ts
-/**
-* FS `ResultBlobStore`. One JSON file per artifact under `dir`, named by a
-* filesystem-safe encoding of the `outRef` (`sha256:<hex>` → `sha256-<hex>.json`).
-* `put` fsyncs so a crash between writes never loses an acknowledged blob.
-*
-* @stable
-*/
-var FileResultBlobStore = class {
-	dir;
-	writeContext = captureRunWriteContext();
-	constructor(dir) {
-		this.dir = dir;
-	}
-	async put(outRef, artifact) {
-		return this.writeContext(async () => {
-			const { text } = encodeResultBlob(outRef, artifact);
-			const filePath = this.blobPath(outRef);
-			assertNoSymlinkDescendant(this.dir, filePath, "result blob");
-			await (await import("node:fs/promises")).mkdir(this.dir, { recursive: true });
-			assertNoSymlinkDescendant(this.dir, filePath, "result blob");
-			if (!publishExclusiveDurableFile(filePath, text, { mode: 384 })) assertContentAddress(outRef, await this.get(outRef));
-		});
-	}
-	async get(outRef) {
-		const filePath = this.blobPath(outRef);
-		assertNoSymlinkDescendant(this.dir, filePath, "result blob");
-		const fs = await import("node:fs/promises");
-		const { constants } = await import("node:fs");
-		let text;
-		try {
-			const handle = await fs.open(filePath, constants.O_RDONLY | constants.O_NOFOLLOW);
-			try {
-				if (!(await handle.stat()).isFile()) throw new Error("result blob must be a regular file");
-				text = await handle.readFile("utf8");
-			} finally {
-				await handle.close();
-			}
-		} catch (err) {
-			if (isNoEntError(err)) return void 0;
-			throw err;
-		}
-		const artifact = JSON.parse(text);
-		assertContentAddress(outRef, artifact);
-		return artifact;
-	}
-	blobPath(outRef) {
-		if (!/^sha256:[0-9a-f]{64}$/.test(outRef)) throw new Error("invalid result blob content address");
-		return `${this.dir}/${outRef.replace(/:/g, "-")}.json`;
-	}
-};
-/** @internal shared with the SQL-backed store. */
-function encodeResultBlob(outRef, artifact) {
-	const detached = detachedSnapshot(artifact, "result blob");
-	assertContentAddress(outRef, detached);
-	const text = JSON.stringify(detached);
-	if (text === void 0) throw new Error("result blob must contain JSON");
-	const snapshot = JSON.parse(text);
-	assertContentAddress(outRef, snapshot);
-	return {
-		snapshot,
-		text
-	};
-}
-/** @internal shared with the SQL-backed store. */
-function assertContentAddress(outRef, artifact) {
-	const expected = contentAddress(artifact);
-	if (outRef !== expected) throw new Error(`blob outRef '${outRef}' does not match the artifact content hash '${expected}'; a content-addressed store refuses a mismatched ref (breaks the replay invariant)`);
-}
 // src/durable/in-memory-spawn-stores.ts
 /** In-process decision and payload retention; no acknowledged state survives process exit. */
 /**
@@ -24623,6 +24571,7 @@ async function startRetainedInteractiveRun(options) {
 	assertStableText(startOptions.environment.idempotencyKey, "environment idempotency key");
 	assertStableText(startOptions.interactiveIdempotencyKey, "interactive idempotency key");
 	if (typeof startOptions.onAdmission !== "function") throw new Error("startRetainedInteractiveRun requires an awaited onAdmission durability hook");
+	const onAdmission = journaledAdmissions(startOptions.journalRoot, startOptions.intent?.runId, startOptions.onAdmission);
 	if (!startOptions.provider.get) throw new Error(`provider "${startOptions.provider.name}" cannot reconstruct an environment by id`);
 	const profile = agentProfileSchema.parse(startOptions.environment.profile);
 	if (profile.harness === void 0) throw new Error("retained interactive runs require AgentProfile.harness");
@@ -24634,7 +24583,7 @@ async function startRetainedInteractiveRun(options) {
 	assertStableText(identity.sessionId, "retained session id");
 	assertStableText(identity.executionId, "retained execution id");
 	const intent = interactiveIntent(startOptions, profile, identity);
-	if (startOptions.intent === void 0) await admitDurably(startOptions.onAdmission, intent);
+	if (startOptions.intent === void 0) await admitDurably(onAdmission, intent);
 	else assertExactInteractiveIntent(startOptions.intent, intent, () => interactiveIntent(startOptions, profile, identity, legacyRetainedCreateMaterial));
 	const providerCapabilities = AgentEnvironmentCapabilitiesSchema.parse(await awaitAbortable$1(Promise.resolve().then(() => startOptions.provider.capabilities()), startOptions.signal));
 	assertInteractiveCapabilities(startOptions.provider.name, providerCapabilities);
@@ -24655,7 +24604,7 @@ async function startRetainedInteractiveRun(options) {
 		throw error;
 	}
 	const request = interactiveRequest(startOptions, environment, profile, requestedProfileDigest, identity);
-	await admitDurably(startOptions.onAdmission, {
+	await admitDurably(onAdmission, {
 		phase: "interactive_environment",
 		provider: startOptions.provider.name,
 		environmentId: environment.id,
@@ -24664,7 +24613,7 @@ async function startRetainedInteractiveRun(options) {
 		request
 	});
 	const ref = exactStartedRef(request, await startInteractiveProcess(environment, () => environment.startInteractive(request, { signal: startOptions.signal }), startOptions.signal));
-	await admitDurably(startOptions.onAdmission, {
+	await admitDurably(onAdmission, {
 		phase: "interactive_started",
 		idempotencyKey: startOptions.environment.idempotencyKey,
 		interactiveIdempotencyKey: startOptions.interactiveIdempotencyKey,
@@ -29647,6 +29596,6 @@ async function noWinner(settled, rejection) {
 		reason: "no-result-selected"
 	};
 }
-export { abandonScopeRetainedOwnerInvocation as $, CheckUnavailableError as $n, newExecutionAttemptId as $r, harnessTranscriptArtifact as $t, noteScopeOwnerPlannedExecution as A, createPeerMailbox as An, harnessInvocation as Ar, acquireSandbox as At, deriveNodeExecutionIdentity as B, DriverAttemptsExhaustedError as Bn, renderUnsupported as Br, createAgentEnvironmentProviderRegistry as Bt, interactiveAdmissionSeamKey as C, INBOX_RECEIPT_KEY as Cn, signalAbortError as Cr, DEFAULT_SANDBOX_STEERING_MAX_TURNS as Ct, recoverRetainedInteractiveRun as D, DEFAULT_PEER_MAIL_LIMITS as Dn, runSettledCommand as Dr, readPromptOptions as Dt, reconnectRetainedInteractiveRun as E, AUTHORITY_MARKERS as En, defaultRunCommand as Er, assertBoxlessPromptOptions as Et, coordinationProfileToolPrefix as F, DEFAULT_STALL_AFTER_MS as Fn, defineProfileMaterializationContract as Fr, createCodeModeTools as Ft, meterRuntimeOwnedProviderAttempt as G, summarizeDriverAttempts as Gn, attestRuntimeOwnedPendingExecutor as Gr, reconnectRetainedRun as Gt, queueOf as H, abandonablePending as Hn, sandboxProfileMaterialization as Hr, providerAsExecutor as Ht, providerVisibleProfile as I, createActivityLog as In, fullProfileMaterialization as Ir, runCodeMode as It, recordScopeOwnerPause as J, SeatChain as Jn, authoredProfileDigest as Jr, startRetainedRunInEnvironment as Jt, recordScopeOwnerBarrenPause as K, undispatchedCredentialExit as Kn, attestRuntimeOwnedScopeOwner as Kr, recoverRetainedRun as Kt, runtimeGraphMetadataKey as L, readWorkerProgress as Ln, profileMaterializationAxes$1 as Lr, toolResultText as Lt, restoreScopeOwnerAcceptedExecution as M, peerMailTools as Mn, assertProfileMaterialization as Mr, defaultSelectWinner as Mt, scopeOwnerExecutorNodeContext as N, peerMailVerbNames as Nn, assertProfileMaterializes as Nr, codeModeArguments as Nt, startRetainedInteractiveRun as O, PEER_MAIL_WIRE_KEY as On, runWorktreeHarness as Or, createSandboxForSpec as Ot, coordinationMcpAlias as P, taskToPrompt$1 as Pn, controlProfileMaterialization as Pr, codeModeModelOutput as Pt, resolveSpawnResourcePaths as Q, subscriptionUsageLimitSignal as Qn, knownMaterializationReceipt as Qr, captureHarnessTranscript as Qt, settledToIteration as R, isLiveNodeStatus as Rn, promptControlProfileMaterialization as Rr, createRouterTranscript as Rt, workerTraceAnalysisStore as S, sanitizeRuntimeStreamEvent as Sn, runAbortable as Sr, snapshotExecutorConfig as St, readWorkerInteractiveBinding as T, failPendingAfter as Tn, bridgeStopSignalKey as Tr, runAgentRounds as Tt, rollingDispatch as U, causedByPartialFailure as Un, unsupportedProfileDimensions as Ur, LEAF_CONTINUATION_TASK as Ut, freeSlots as V, HarnessTurnFailedError as Vn, sandboxActProfileMaterialization as Vr, resolveAgentEnvironmentProvider as Vt, meterRuntimeOwnedAccounting as W, classifyDriverFailure as Wn, worktreeCliProfileMaterialization as Wr, providerAsSandboxClient as Wt, scopeRetainedOwnerResourceReader as X, authoredSeatStages as Xn, inheritRuntimeOwnedExecutorAttestation as Xr, destroyInteractiveEnvironment as Xt, prepareScopeRetainedOwnerSeatSwitch as Y, SeatChainExhaustedError as Yn, finalizeRuntimeOwnedPendingExecutor as Yr, retainedCreateMaterial as Yt, environmentReader as Z, seatExecutionProfile as Zn, knownExecutionBindingReceipt as Zr, environmentGone as Zt, withDriverExecutor as _, providerMessageText as _i, generateSpanId as _n, harnessUsageIsEmpty as _r, FileResultBlobStore as _t, assertRunParking as a, runtimeOwnedExecutorProviderEvidence as ai, openSlotGroup as an, admitContinuationPolicy as ar, scopeRetainedOwnerTurnEnded as at, isTraceAnalysisStore as b, createRuntimeStreamEventCollector as bn, RunCancellationReason as br, captureReusableExecutorConfig as bt, sleepScopeWait as c, unknownExecutionBindingReceipt as ci, WORKER_TRACE_PROPAGATION as cn, createContinuationKeeper as cr, noteScopeRetainedOwnerCoordination as ct, runFinalizer as d, executableAgentSpecSnapshot as di, buildLoopOtelSpans as dn, bridgeAdmissionRefusal as dr, scopeRetainedOwnerContext as dt, providerAttemptEvidence as ei, persistHarnessTranscript as en, gateFactoryOnDeliverable as er, consumeScopeRetainedOwnerResult as et, runTree as f, projectSandboxOutcome as fi, buildLoopSpanNodes as fn, bridgeModelRouteRefusal as fr, scopeRetainedOwnerJournalRoot as ft, isDriverSpec as g, promptOptionsFromAgentTurnInput as gi, flatOtelSpan as gn, createCodexRolloutStoreReader as gr, InMemorySpawnJournal as gt, driverExecutorFactory as h, promptFromAgentTurnInput as hi, createOtelExporter as hn, addHarnessUsage as hr, InMemoryResultBlobStore as ht, RunParkedError as i, runtimeOwnedExecutorMaterialization as ii, createWorkerSlots as in, CONTINUATIONS_DIR as ir, beginScopeRetainedOwnerDrive as it, recordScopeOwnerMaterialization as j, isPeerMailEnvelope as jn, terminateProcessTreeAndConfirm as jr, TERMINAL_DECISIONS as jt, beginScopeOwnerAttempt as k, claimsAuthority as kn, LOCAL_HARNESSES as kr, createSandboxLineage as kt, withRunParking as l, unknownMaterializationReceipt as li, createPropagatingTraceEmitter as ln, failedItems as lr, bindScopeRetainedOwnerEnvironmentId as lt, driverChild as m, awaitAbortable$1 as mi, createOpenInferenceFileExporter as mn, ROUTER_PRICE_SOURCE as mr, materializeTreeView as mt, createSupervisor as n, runtimeOwnedDriveHarnessProviderEvidence as ni, resolveHarnessTranscriptCapture as nn, mapExecutorResult as nr, scopeRetainedOwnerPriorSpend as nt, bindScopeParkingDrain as o, runtimeOwnedPendingExecutorMaterialization as oi, createWorktreeCliExecutor as on, bestComposite as or, reconcileScopeRetainedOwnerEnvironment as ot, createRootHandle as p, readSandboxOutcome as pi, buildRuntimeEventOtelSpans as pn, priceTokens as pr, loadSpawnForest as pt, recordScopeOwnerDriverAttempt as q, upstreamUnavailableSignal as qn, authoredAgentIdentity as qr, startRetainedRun as qt, assertResumeLimits as r, runtimeOwnedExecutorExecutionBinding as ri, retainHarnessTranscript as rn, verdictFromJudgeScore as rr, scopeRetainedOwnerResult as rt, readRunParking as s, runtimeOwnedScopeOwnerRuntime as si, createInPlaceCliExecutor as sn, checkVerdictOf as sr, scopeRetainedOwnerRestorePoint as st, DEFAULT_MAX_DEPTH as t, recordRuntimeOwnedDriveHarnessProviderEvidence as ti, readHarnessTranscript as tn, gateOnDeliverable as tr, prepareScopeRetainedOwnerTask as tt, bestDelivered as u, executableAgentProfileSnapshot as ui, readTraceContextFromEnv as un, isFiniteNumber as ur, bindScopeRetainedOwnerProvider as ut, createScope as v, loopEventToOtelSpan as vn, readCodexRolloutSession as vr, createExecutorRegistry as vt, attachWorker as w, createInbox as wn, bridgeRuntimeAttachmentsKey as wr, createSteerableSandboxSession as wt, parseWorkerToolTraceArtifact as x, sanitizeKnowledgeReadinessReport as xn, linkAbort as xr, createExecutor as xt, replaySpawnTree as y, createRuntimeEventCollector as yn, createPushTraceSource as yr, bindReusableExecutorExecutionId as yt, assertRecursiveReservationPolicy as z, isTerminalNodeStatus as zn, promptModelProfileMaterialization as zr, routerBrain as zt };
+export { abandonScopeRetainedOwnerInvocation as $, gateFactoryOnDeliverable as $n, providerAttemptEvidence as $r, persistHarnessTranscript as $t, noteScopeOwnerPlannedExecution as A, isPeerMailEnvelope as An, terminateProcessTreeAndConfirm as Ar, TERMINAL_DECISIONS as At, deriveNodeExecutionIdentity as B, HarnessTurnFailedError as Bn, sandboxActProfileMaterialization as Br, resolveAgentEnvironmentProvider as Bt, interactiveAdmissionSeamKey as C, createInbox as Cn, bridgeRuntimeAttachmentsKey as Cr, createSteerableSandboxSession as Ct, recoverRetainedInteractiveRun as D, PEER_MAIL_WIRE_KEY as Dn, runWorktreeHarness as Dr, createSandboxForSpec as Dt, reconnectRetainedInteractiveRun as E, DEFAULT_PEER_MAIL_LIMITS as En, runSettledCommand as Er, readPromptOptions as Et, coordinationProfileToolPrefix as F, createActivityLog as Fn, fullProfileMaterialization as Fr, runCodeMode as Ft, meterRuntimeOwnedProviderAttempt as G, undispatchedCredentialExit as Gn, attestRuntimeOwnedScopeOwner as Gr, recoverRetainedRun as Gt, queueOf as H, causedByPartialFailure as Hn, unsupportedProfileDimensions as Hr, LEAF_CONTINUATION_TASK as Ht, providerVisibleProfile as I, readWorkerProgress as In, profileMaterializationAxes$1 as Ir, toolResultText as It, recordScopeOwnerPause as J, SeatChainExhaustedError as Jn, finalizeRuntimeOwnedPendingExecutor as Jr, retainedCreateMaterial as Jt, recordScopeOwnerBarrenPause as K, upstreamUnavailableSignal as Kn, authoredAgentIdentity as Kr, startRetainedRun as Kt, runtimeGraphMetadataKey as L, isLiveNodeStatus as Ln, promptControlProfileMaterialization as Lr, createRouterTranscript as Lt, restoreScopeOwnerAcceptedExecution as M, peerMailVerbNames as Mn, assertProfileMaterializes as Mr, codeModeArguments as Mt, scopeOwnerExecutorNodeContext as N, taskToPrompt$1 as Nn, controlProfileMaterialization as Nr, codeModeModelOutput as Nt, startRetainedInteractiveRun as O, claimsAuthority as On, LOCAL_HARNESSES as Or, createSandboxLineage as Ot, coordinationMcpAlias as P, DEFAULT_STALL_AFTER_MS as Pn, defineProfileMaterializationContract as Pr, createCodeModeTools as Pt, resolveSpawnResourcePaths as Q, CheckUnavailableError as Qn, newExecutionAttemptId as Qr, harnessTranscriptArtifact as Qt, settledToIteration as R, isTerminalNodeStatus as Rn, promptModelProfileMaterialization as Rr, routerBrain as Rt, workerTraceAnalysisStore as S, INBOX_RECEIPT_KEY as Sn, signalAbortError as Sr, DEFAULT_SANDBOX_STEERING_MAX_TURNS as St, readWorkerInteractiveBinding as T, AUTHORITY_MARKERS as Tn, defaultRunCommand as Tr, assertBoxlessPromptOptions as Tt, rollingDispatch as U, classifyDriverFailure as Un, worktreeCliProfileMaterialization as Ur, providerAsSandboxClient as Ut, freeSlots as V, abandonablePending as Vn, sandboxProfileMaterialization as Vr, providerAsExecutor as Vt, meterRuntimeOwnedAccounting as W, summarizeDriverAttempts as Wn, attestRuntimeOwnedPendingExecutor as Wr, reconnectRetainedRun as Wt, scopeRetainedOwnerResourceReader as X, seatExecutionProfile as Xn, knownExecutionBindingReceipt as Xr, environmentGone as Xt, prepareScopeRetainedOwnerSeatSwitch as Y, authoredSeatStages as Yn, inheritRuntimeOwnedExecutorAttestation as Yr, destroyInteractiveEnvironment as Yt, environmentReader as Z, subscriptionUsageLimitSignal as Zn, knownMaterializationReceipt as Zr, captureHarnessTranscript as Zt, withDriverExecutor as _, promptFromAgentTurnInput as _i, loopEventToOtelSpan as _n, readCodexRolloutSession as _r, createExecutorRegistry as _t, assertRunParking as a, runtimeOwnedPendingExecutorMaterialization as ai, createWorktreeCliExecutor as an, bestComposite as ar, scopeRetainedOwnerTurnEnded as at, isTraceAnalysisStore as b, sanitizeKnowledgeReadinessReport as bn, linkAbort as br, createExecutor as bt, sleepScopeWait as c, unknownMaterializationReceipt as ci, createPropagatingTraceEmitter as cn, failedItems as cr, noteScopeRetainedOwnerCoordination as ct, runFinalizer as d, isRuntimeFlowBrain as di, buildLoopSpanNodes as dn, bridgeModelRouteRefusal as dr, scopeRetainedOwnerContext as dt, recordRuntimeOwnedDriveHarnessProviderEvidence as ei, readHarnessTranscript as en, gateOnDeliverable as er, consumeScopeRetainedOwnerResult as et, runTree as f, runtimeFlowAgent as fi, buildRuntimeEventOtelSpans as fn, priceTokens as fr, scopeRetainedOwnerJournalRoot as ft, isDriverSpec as g, awaitAbortable$1 as gi, generateSpanId as gn, harnessUsageIsEmpty as gr, InMemorySpawnJournal as gt, driverExecutorFactory as h, readSandboxOutcome as hi, flatOtelSpan as hn, createCodexRolloutStoreReader as hr, InMemoryResultBlobStore as ht, RunParkedError as i, runtimeOwnedExecutorProviderEvidence as ii, openSlotGroup as in, admitContinuationPolicy as ir, beginScopeRetainedOwnerDrive as it, recordScopeOwnerMaterialization as j, peerMailTools as jn, assertProfileMaterialization as jr, defaultSelectWinner as jt, beginScopeOwnerAttempt as k, createPeerMailbox as kn, harnessInvocation as kr, acquireSandbox as kt, withRunParking as l, executableAgentProfileSnapshot as li, readTraceContextFromEnv as ln, isFiniteNumber as lr, bindScopeRetainedOwnerEnvironmentId as lt, driverChild as m, projectSandboxOutcome as mi, createOtelExporter as mn, addHarnessUsage as mr, materializeTreeView as mt, createSupervisor as n, runtimeOwnedExecutorExecutionBinding as ni, retainHarnessTranscript as nn, verdictFromJudgeScore as nr, scopeRetainedOwnerPriorSpend as nt, bindScopeParkingDrain as o, runtimeOwnedScopeOwnerRuntime as oi, createInPlaceCliExecutor as on, checkVerdictOf as or, reconcileScopeRetainedOwnerEnvironment as ot, createRootHandle as p, runtimeFlowBrain as pi, createOpenInferenceFileExporter as pn, ROUTER_PRICE_SOURCE as pr, loadSpawnForest as pt, recordScopeOwnerDriverAttempt as q, SeatChain as qn, authoredProfileDigest as qr, startRetainedRunInEnvironment as qt, assertResumeLimits as r, runtimeOwnedExecutorMaterialization as ri, createWorkerSlots as rn, CONTINUATIONS_DIR as rr, scopeRetainedOwnerResult as rt, readRunParking as s, unknownExecutionBindingReceipt as si, WORKER_TRACE_PROPAGATION as sn, createContinuationKeeper as sr, scopeRetainedOwnerRestorePoint as st, DEFAULT_MAX_DEPTH as t, runtimeOwnedDriveHarnessProviderEvidence as ti, resolveHarnessTranscriptCapture as tn, mapExecutorResult as tr, prepareScopeRetainedOwnerTask as tt, bestDelivered as u, executableAgentSpecSnapshot as ui, buildLoopOtelSpans as un, bridgeAdmissionRefusal as ur, bindScopeRetainedOwnerProvider as ut, createScope as v, promptOptionsFromAgentTurnInput as vi, createRuntimeEventCollector as vn, createPushTraceSource as vr, bindReusableExecutorExecutionId as vt, attachWorker as w, failPendingAfter as wn, bridgeStopSignalKey as wr, runAgentRounds as wt, parseWorkerToolTraceArtifact as x, sanitizeRuntimeStreamEvent as xn, runAbortable as xr, snapshotExecutorConfig as xt, replaySpawnTree as y, providerMessageText as yi, createRuntimeStreamEventCollector as yn, RunCancellationReason as yr, captureReusableExecutorConfig as yt, assertRecursiveReservationPolicy as z, DriverAttemptsExhaustedError as zn, renderUnsupported as zr, createAgentEnvironmentProviderRegistry as zt };
 
-//# sourceMappingURL=supervisor-hHU3ZJnR.js.map
+//# sourceMappingURL=supervisor-L7u3pQ1j.js.map