@tangle-network/agent-runtime 2.3.14 → 3.0.2

package/dist/{supervisor-3JHXy3tz.js → supervisor-CORJv7-r.js}

@@ -1,6 +1,6 @@
-import { $r as isProvisioningRefusal, $t as describeRetainedNativeStops, A as nestedScopeSeamKey, Ai as sandboxProgressEvents, An as openNativeMirror, Ar as recordRuntimeOwnedProviderIdentityConflict, At as scopeRetainedOwnerSettled, Bi as notifySandboxEventObserver, Br as executableAgentProfileSnapshot, Cr as knownExecutionBindingReceipt, Dn as captureProviderLiveWorkspace, En as assertProviderWorkspaceRetentionPort, Fi as canonicalSandboxUsageMode, Fn as WORKER_TRACE_PROPAGATION, Ft as scopeRetainedOwnerCheckpointing, Gi as parseCodexUsageRecord, Gr as reportedFailureCause, Gt as driverRuntime, Hi as sandboxTerminalUsageField, Ht as ownedTreeRootSpawn, Ii as createSandboxTurnEventCollector, In as workerTraceEnv, Ji as assertEventBinding, Jr as runtimeFailureRemediationSchema, Jt as encodeResultBlob, Ki as recordValue, Kr as runtimeFailureCause, Kt as nestedDriverTreeRoot, Li as createSandboxUsageLedger, Ln as workerTraceHeaders, Lr as runtimeOwnedScopeOwnerRuntime, Ni as extractTransportEventIdentity, Nr as runtimeOwnedExecutorExecutionBinding, Oi as sandboxLeafOutputFromEvents, On as captureProviderWorkspaceSnapshot, Or as recordRuntimeOwnedProviderAttemptStart, Pi as assertSandboxServedModel, Pn as resolveWorkerSlots, Pr as runtimeOwnedExecutorMaterialization, Q as assertRecursiveReservationPolicy, Qi as sameControlCoordinates, Qr as RetainedExecutionPendingError, Qt as verifyWorkspaceMarker, R as appendSpawnEvents, Rr as unknownExecutionBindingReceipt, Rt as retainedOwnerWorkspaceRetentionSeamKey, Sr as inheritRuntimeOwnedExecutorAttestation, T as sumSpendFromEvents, Ti as createSandboxToolPartState, Tr as newExecutionAttemptId, V as finalizeScopeOwnerMaterialization, Vi as sandboxEventServedBackend, Vr as executableAgentSpecSnapshot, Vt as loadSpawnForest, Wt as attestNestedDriverTreeOwner, X as reenteredWorkers, Xi as exactSession, Xt as closesCursorSlot, Yi as awaitAbortable, Yr as runtimeProviderCode, Yt as SpawnEventIndex, Zi as freezeControlRef, Zr as DISPATCH_NOT_ADMITTED_CODE, _i as credentialCommandExit, _n as captureHarnessTranscript, _r as attestRuntimeOwnedPendingExecutor, _t as startScopeRecoveries, an as startRetainedRun, at as hasRetriableTeardowns, bn as harnessTranscriptUnavailable, dr as abortReason, dt as registerNestedTeardownScope, ea as promptOptionsFromAgentTurnInput, en as stopRetainedNativeExecution, er as createActivityLog, fr as linkAbort, ft as releaseHeldEnvironments, gi as hashJson, gn as environmentGone, gr as attestRuntimeOwnedExecutor, gt as settleManagerWork, hr as attestRuntimeOwnedDeferredExecutor, ht as retryUnconfirmedTeardowns, ii as UNAVAILABLE_STATUSES, in as recoverRetainedRun, it as closeScopeAdmission, jn as workspaceCaptureReceipt, jr as recordRuntimeOwnedProviderModel, ki as sandboxOutputMarker, kn as nativeCopyDelayMs, kr as recordRuntimeOwnedProviderDispatchNotStarted, li as unavailableSignalInText, lr as subscriptionUsageLimitSignal, mi as contentRef, mt as releaseRetainedEnvironments, ni as retainedExecutorSeamKey, nn as mintRetainedIdentity, pi as contentAddress, pr as runAbortable, pt as releaseManagerEnvironment, qi as RetainedRunProviderContractError, ri as UNAVAILABLE_CODES, rn as reconnectRetainedRun, rr as isLiveNodeStatus, rt as closeRetainedSlots, si as unavailablePauseMs, t as createScope, ti as retainedExecutorContext, tn as assertRetainedRunReplayMaterial, tr as describeToolArgs, ui as unavailableSignalOfFailure, ur as RunCancellationReason, vi as isCredentialRefusal, vt as unconfirmedTeardowns, w as prepareScopeResume, wn as retainHarnessTranscript, wr as knownMaterializationReceipt, xr as finalizeRuntimeOwnedPendingExecutor, yi as createBudgetPool, yn as harnessTranscriptFromLines, yt as waitForScopeChildren, zi as isSandboxTerminalEvent, zn as mergeTraceEnv, zr as unknownMaterializationReceipt } from "./scope-DRaBilEX.js";
+import { $i as awaitAbortable, $r as runtimeProviderCode, $t as describeRetainedNativeStops, A as nestedScopeSeamKey, At as scopeRetainedOwnerSettled, Bi as createSandboxTurnEventCollector, Ci as createBudgetPool, Cn as workspaceCaptureReceipt, Dn as WORKER_TRACE_PROPAGATION, Dr as knownExecutionBindingReceipt, En as resolveWorkerSlots, Er as inheritRuntimeOwnedExecutorAttestation, Fr as recordRuntimeOwnedProviderModel, Ft as scopeRetainedOwnerCheckpointing, Gi as sandboxEventServedBackend, Gn as HARNESS_TRANSCRIPT_SETTLE_TIMEOUT_MS, Gr as executableAgentSpecSnapshot, Gt as driverRuntime, Hr as unknownExecutionBindingReceipt, Ht as ownedTreeRootSpawn, Jt as encodeResultBlob, Ki as sandboxTerminalUsageField, Kt as nestedDriverTreeRoot, Li as extractTransportEventIdentity, Lr as runtimeOwnedExecutorExecutionBinding, Mi as sandboxLeafOutputFromEvents, Mr as recordRuntimeOwnedProviderAttemptStart, Ni as sandboxOutputMarker, Nr as recordRuntimeOwnedProviderDispatchNotStarted, On as workerTraceEnv, Or as knownMaterializationReceipt, Pi as sandboxProgressEvents, Pr as recordRuntimeOwnedProviderIdentityConflict, Q as assertRecursiveReservationPolicy, Qi as assertEventBinding, Qr as runtimeFailureRemediationSchema, Qt as verifyWorkspaceMarker, R as appendSpawnEvents, Ri as assertSandboxServedModel, Rr as runtimeOwnedExecutorMaterialization, Rt as retainedOwnerWorkspaceRetentionSeamKey, Si as isCredentialRefusal, Sn as openNativeMirror, T as sumSpendFromEvents, Tr as finalizeRuntimeOwnedPendingExecutor, Ui as isSandboxTerminalEvent, Ur as unknownMaterializationReceipt, V as finalizeScopeOwnerMaterialization, Vi as createSandboxUsageLedger, Vr as runtimeOwnedScopeOwnerRuntime, Vt as loadSpawnForest, Wi as notifySandboxEventObserver, Wr as executableAgentProfileSnapshot, Wt as attestNestedDriverTreeOwner, X as reenteredWorkers, Xi as recordValue, Xn as harnessTranscriptUnavailable, Xr as runtimeFailureCause, Xt as closesCursorSlot, Yi as parseCodexUsageRecord, Yn as harnessTranscriptFromLines, Yr as reportedFailureCause, Yt as SpawnEventIndex, Zi as RetainedRunProviderContractError, _i as contentAddress, _r as runAbortable, _t as startScopeRecoveries, ai as retainedExecutorContext, an as startRetainedRun, ar as describeToolArgs, at as hasRetriableTeardowns, bi as hashJson, bn as captureProviderWorkspaceSnapshot, br as attestRuntimeOwnedExecutor, ci as UNAVAILABLE_STATUSES, di as unavailablePauseMs, dt as registerNestedTeardownScope, ea as exactSession, en as stopRetainedNativeExecution, ft as releaseHeldEnvironments, gn as environmentGone, gr as linkAbort, gt as settleManagerWork, hr as abortReason, ht as retryUnconfirmedTeardowns, ia as promptOptionsFromAgentTurnInput, in as recoverRetainedRun, ir as createActivityLog, it as closeScopeAdmission, jn as mergeTraceEnv, ki as createSandboxToolPartState, kn as workerTraceHeaders, kr as newExecutionAttemptId, mi as unavailableSignalOfFailure, mr as RunCancellationReason, mt as releaseRetainedEnvironments, na as sameControlCoordinates, ni as RetainedExecutionPendingError, nn as mintRetainedIdentity, nr as retainHarnessTranscript, oi as retainedExecutorSeamKey, pi as unavailableSignalInText, pr as subscriptionUsageLimitSignal, pt as releaseManagerEnvironment, qn as captureHarnessTranscript, ri as isProvisioningRefusal, rn as reconnectRetainedRun, rt as closeRetainedSlots, si as UNAVAILABLE_CODES, sr as isLiveNodeStatus, t as createScope, ta as freezeControlRef, ti as DISPATCH_NOT_ADMITTED_CODE, tn as assertRetainedRunReplayMaterial, vi as contentRef, vn as assertProviderWorkspaceRetentionPort, vt as unconfirmedTeardowns, w as prepareScopeResume, xi as credentialCommandExit, xn as nativeCopyDelayMs, xr as attestRuntimeOwnedPendingExecutor, yn as captureProviderLiveWorkspace, yr as attestRuntimeOwnedDeferredExecutor, yt as waitForScopeChildren, zi as canonicalSandboxUsageMode } from "./scope-CwhYLg6s.js";
 import { f as RuntimeRunStateError, i as ConfigError, m as ValidationError$1, r as BackendTransportError, t as AgentEvalError } from "./errors-AzSuGI23.js";
-import { $ as mapWithConcurrency, B as hasControlCharacter, Dt as teardownSurfaces, H as addSpend, J as errorMessage, K as cloneTokenUsage, Q as isAsyncIterable, U as addTokenUsage, Z as isAbortError, at as stringifySafe, bt as ROOT_DEADLINE_REASON, ct as unmeteredSpend, dt as zeroTokenUsage, et as promptCacheTokenClasses, ft as addResourceSpend, gt as ACCEPTED_RESULT_GRACE_MS, ht as withBudgetResources, it as sleep, lt as withTimeout, nt as randomUuid, ot as throwAbort, q as deleteBoxSafe, rt as roundBoxMinutes, st as throwIfAborted, tt as randomSuffix, ut as zeroSpend, wt as isDeadlineAbortReason, xt as armDeadlineTimer } from "./workspace-streams-Dep2L6XD.js";
+import { $ as isAsyncIterable, J as deleteBoxSafe, Ot as teardownSurfaces, Q as isAbortError, St as armDeadlineTimer, Tt as isDeadlineAbortReason, U as addSpend, V as hasControlCharacter, W as addTokenUsage, Y as errorMessage, _t as ACCEPTED_RESULT_GRACE_MS, at as sleep, ct as throwIfAborted, dt as zeroSpend, et as mapWithConcurrency, ft as zeroTokenUsage, gt as withBudgetResources, it as roundBoxMinutes, lt as unmeteredSpend, nt as randomSuffix, ot as stringifySafe, pt as addResourceSpend, q as cloneTokenUsage, rt as randomUuid, st as throwAbort, tt as promptCacheTokenClasses, ut as withTimeout, xt as ROOT_DEADLINE_REASON } from "./workspace-streams-COSTjQLW.js";
 import { t as runTaskQueue } from "./task-queue-DbpZAp6C.js";
 import { _ as errorText, d as detachedSnapshot, g as errorProperty, h as errorHttpStatus, l as sha256, m as errMessage, p as causeChain, v as defaultRedactor } from "./jsonl-file-BBP9Dz9w.js";
 import { _ as agentHarness, a as concreteProfileModel, c as profileModelExecutionSettings, d as assertRouterAutoDeclaration, f as assertRouterAutoResponse, g as observedModelMatchesDeclared, h as observedModelHasSnapshot, l as profileProviderModel, m as mergeObservedModelIdentity, o as enforceTokenLimits, s as profileBridgeWireModel, t as assertExecutableAgentProfile, u as resolveRouterRetryPolicy } from "./model-policy-C-RGAUW4.js";
@@ -10,6 +10,7 @@ import { i as notifyRuntimeHookEvent } from "./runtime-hooks-CsW2pfFk.js";
 import { AGENT_PROFILE_MATERIALIZATION_AXES, AgentExactRunControlRefSchema, AgentRunCancellationRequestSchema, AgentTurnInputSchema, REASONING_EFFORTS, agentProfileSchema, canonicalAgentProfileDigest, canonicalCandidateDigest, canonicalWorkspaceCwd, harnessTypeSchema, nativeReasoningControl, profileMaterializationAxes, profileMaterializationAxes as profileMaterializationAxes$1, renderInputPartsAsText, sha256DigestSchema } from "@tangle-network/agent-interface";
 import { createAgentRunOutcomeTracker } from "@tangle-network/sandbox/runtime";
 import { SDKError, generateIdempotencyKey, isRecord, withRetry } from "@tangle-network/agent-core";
+import { collectAgentFinalMessageText, collectAgentResponseText, isToolBearingEvent } from "@tangle-network/sandbox";
 import { z } from "zod";
 import { createHash, randomBytes, randomUUID } from "node:crypto";
 import { appendFileSync, closeSync, constants, createReadStream, existsSync, openSync } from "node:fs";
@@ -6118,6 +6119,74 @@ function mergeBridgeObservedModel(current, next) {
 	if (merged === void 0) throw new ValidationError$1(`bridgeExecutor: bridge changed response model from ${JSON.stringify(current)} to ${JSON.stringify(next)}`);
 	return merged;
 }
+// src/runtime/supervise/bridge-transcript.ts
+/** The existing executor transcript lifecycle; Scope alone persists the resulting capture. */
+function bridgeTranscript(seam, sessionId, profile, runs, node) {
+	if (!seam.harnessTranscript) return {
+		ports: {},
+		settle: (source) => source
+	};
+	let capture = harnessTranscriptUnavailable("execution-never-started");
+	let settled = Promise.resolve();
+	const finish = async () => {
+		if (!runs.size) {
+			capture = harnessTranscriptUnavailable("execution-never-started");
+			return;
+		}
+		const signal = AbortSignal.timeout(HARNESS_TRANSCRIPT_SETTLE_TIMEOUT_MS);
+		try {
+			const work = async () => {
+				const admitted = [...runs.values()].map((run) => {
+					if (!run.requestDigest) throw new Error(`Bridge run ${run.id} has no authenticated request digest`);
+					return {
+						runId: run.id,
+						requestDigest: run.requestDigest
+					};
+				});
+				if (!(await Promise.all([...runs.values()].map((run) => cancelBridgeRunToTerminal(seam, run, 36e4, signal)))).every(Boolean)) throw new Error("Bridge native capture has no terminal proof for every admitted run");
+				return seam.harnessTranscript({
+					sessionId,
+					harness: agentHarness(profile.harness),
+					profileDigest: canonicalAgentProfileDigest(profile),
+					...seam.cwd === void 0 ? {} : { cwd: seam.cwd },
+					...node === void 0 ? {} : { node },
+					runs: admitted,
+					signal
+				});
+			};
+			capture = await runAbortable(work, signal, "Bridge native capture stopped");
+		} catch (error) {
+			capture = {
+				status: "unavailable",
+				reason: "capture-failed",
+				skipped: [{
+					path: sessionId,
+					reason: error instanceof Error ? error.message : "Bridge native capture failed"
+				}]
+			};
+		}
+	};
+	return {
+		ports: {
+			harnessTranscript: () => capture,
+			harnessTranscriptSettled: () => settled
+		},
+		async *settle(source) {
+			const prior = settled;
+			let done;
+			settled = new Promise((resolve) => {
+				done = resolve;
+			});
+			await prior;
+			capture = harnessTranscriptUnavailable("capture-did-not-run");
+			try {
+				yield* source;
+			} finally {
+				finish().then(done);
+			}
+		}
+	};
+}
 // src/runtime/supervise/peer-mail.ts
 /**
 *
@@ -6874,6 +6943,7 @@ const bridgeExecutor = (spec, ctx) => {
 	const inbox = createInbox();
 	let artifact;
 	const activeRuns = /* @__PURE__ */ new Map();
+	const transcript = bridgeTranscript(seam, sessionId, effectiveProfile, activeRuns, ctx.node);
 	const observation = {
 		turns: 0,
 		note: "starting",
@@ -6923,8 +6993,10 @@ const bridgeExecutor = (spec, ctx) => {
 		}
 	};
 	let acknowledged;
-	let executor = {
+	let executor;
+	executor = {
 		runtime: "cli",
+		...transcript.ports,
 		deliver: (m) => inbox.deliver(m),
 		/**
 		* The LIVE read of this worker, answered entirely from local mirrors so it is synchronous
@@ -6994,7 +7066,7 @@ const bridgeExecutor = (spec, ctx) => {
 					}, plannedBinding);
 				}
 			});
-			return failPendingAfter(inbox, session);
+			return transcript.settle(failPendingAfter(inbox, session));
 		},
 		async cancel(request) {
 			const live = [...activeRuns.values()].filter((run) => !run.terminal);
@@ -8048,20 +8120,20 @@ function createProviderNativeControl(provider, retention, managerStop, state) {
 	* release records what it kept.
 	*/
 	const withoutRunningHarness = (release) => async (signal) => {
-		const receipts = await release(signal);
-		if (receipts.every((receipt) => receipt.destroyed)) return receipts;
-		const stop = await awaitAbortable(stopNativeExecution(), signal).catch((error) => {
-			const controlRef = state.retained?.controlRef ?? admittedControlRef(retention);
-			return controlRef === void 0 ? void 0 : {
-				executionId: controlRef.executionId,
-				effect: "unknown",
-				at: (/* @__PURE__ */ new Date()).toISOString(),
-				error: errorText(error instanceof Error ? error.message : error)
-			};
-		});
-		if (stop === void 0) return receipts;
-		const stopped = describeRetainedNativeStops([stop]);
-		return receipts.map((receipt) => receipt.destroyed ? receipt : {
+		const stop = await awaitAbortable(stopNativeExecution(), signal).catch(() => void 0);
+		const stopped = stop === void 0 ? "native stop unconfirmed: no exact dispatch or cleanup interrupted" : describeRetainedNativeStops([stop]);
+		const environmentId = (state.retained?.controlRef ?? admittedControlRef(retention))?.environmentId ?? admittedEnvironmentId(retention);
+		if (environmentId !== void 0 && !state.harnessStopped) {
+			state.workspacePreservationRequired = true;
+			return [{
+				provider: provider.name,
+				environmentId,
+				destroyed: false,
+				detail: stopped,
+				permanent: true
+			}];
+		}
+		return (await release(signal)).map((receipt) => receipt.destroyed ? receipt : {
 			...receipt,
 			detail: receipt.detail ? `${receipt.detail}; ${stopped}` : stopped
 		});
@@ -8326,6 +8398,13 @@ async function captureBeforeDestroy$1(scope, target, signal) {
 		await awaitAbortable(mirrors.captureNative(target, "interrupted", admitted === void 0 ? void 0 : freezeControlRef(admitted)), signal).catch(() => void 0);
 	}
 }
+// src/runtime/environment-provider/provider-validation-error.ts
+var ValidationError = class extends Error {
+	constructor(message, options) {
+		super(message, options);
+		this.name = "ValidationError";
+	}
+};
 // src/runtime/environment-provider/provider-event-projection.ts
 function sandboxEventFromEnvironmentEvent(event) {
 	const normalized = event.normalized;
@@ -8473,13 +8552,12 @@ function createProviderFailureLedger() {
 	};
 }
 function failureDetail(value) {
-	if (!value) return void 0;
-	const error = value.error;
+	const error = value?.error;
 	if (typeof error === "string") return error;
 	const nestedError = recordValue(error);
 	if (typeof nestedError?.message === "string") return nestedError.message;
-	if (typeof value.message === "string") return value.message;
-	return typeof value.detail === "string" ? value.detail : void 0;
+	if (typeof value?.message === "string") return value.message;
+	return typeof value?.detail === "string" ? value.detail : void 0;
 }
 /** Preserve the Sandbox outcome's numeric HTTP metadata across the provider adapter. */
 function failureStatusCode(value) {
@@ -8487,9 +8565,8 @@ function failureStatusCode(value) {
 	return typeof statusCode === "number" && Number.isInteger(statusCode) && statusCode >= 400 && statusCode <= 599 ? statusCode : void 0;
 }
 function failureCode(value) {
-	if (!value) return void 0;
-	const error = recordValue(value.error);
-	return stringValue(value.errorCode) ?? stringValue(value.code) ?? stringValue(error?.errorCode) ?? stringValue(error?.code);
+	const error = recordValue(value?.error);
+	return stringValue(value?.errorCode) ?? stringValue(value?.code) ?? stringValue(error?.errorCode) ?? stringValue(error?.code);
 }
 function usageSandboxEvent(event) {
 	const type = event.normalized?.type ?? event.type;
@@ -8501,7 +8578,7 @@ function usageSandboxEvent(event) {
 		data: {
 			...event.data,
 			...usage,
-			..."usageMode" in event ? { usageMode: event.usageMode } : event.data.usageMode === void 0 ? {} : { usageMode: event.data.usageMode }
+			..."usageMode" in event ? { usageMode: event.usageMode } : {}
 		},
 		...event.id ? { id: event.id } : {}
 	};
@@ -8586,8 +8663,30 @@ function resultFromEvents(events, fallbackText) {
 		events
 	};
 }
+/** Decode only the final assistant message, keeping the unmodified stream as evidence. */
+function jsonResultFromEvents(events) {
+	if (events.some((event) => event.type === "result" && event.data.eventStreamComplete === false)) throw new ValidationError("provider JSON output: complete native event observation is required");
+	const projected = events.map(sandboxEventFromEnvironmentEvent);
+	const text = collectAgentFinalMessageText(projected) ?? (projected.some(isToolBearingEvent) ? void 0 : collectAgentResponseText(projected));
+	try {
+		return { out: JSON.parse(text ?? "", (_key, value) => {
+			if (typeof value === "number" && !Number.isFinite(value)) throw new SyntaxError("JSON number is not finite");
+			return value;
+		}) };
+	} catch (error) {
+		if (!(error instanceof SyntaxError)) throw error;
+		return {
+			out: null,
+			outcome: {
+				success: false,
+				error: `provider JSON output: ${text === void 0 ? "missing final assistant message" : "invalid final assistant JSON"}; return only a JSON value after tool use`,
+				errorCode: "RUNTIME_OUTPUT_FORMAT_INVALID"
+			}
+		};
+	}
+}
 function textFromEnvironmentEvent(event) {
-	if (typeof event.normalized === "object" && event.normalized && event.normalized.type === "message.part.updated") return typeof event.normalized.delta === "string" ? event.normalized.delta : "";
+	if (event.normalized?.type === "message.part.updated") return typeof event.normalized.delta === "string" ? event.normalized.delta : "";
 	const data = event.data;
 	for (const key of [
 		"delta",
@@ -8638,7 +8737,7 @@ const RETAINED_AWAITING_RESULT_AFTER_MS = 48e4;
 const RETAINED_OBSERVATION_BATCH_EVENTS = 1024;
 /**
 * After its exact result, a stream that still owes its terminal frame keeps reading only while
-* each frame arrives within this long of the last; a quiet stream closes on the result at once.
+* each frame arrives within this long of the result or the last frame.
 * A provider sends a turn's last frames and its result on two connections, and a burst that
 * straddles the result is read whole.
 */
@@ -8660,7 +8759,6 @@ var RetainedObservation = class {
 	lastReplayPosition;
 	sawTerminal = false;
 	lastObservedAt = 0;
-	lastFrameAt;
 	awaitingPublished = false;
 	exactResult;
 	exactResultSettled = false;
@@ -8726,6 +8824,7 @@ var RetainedObservation = class {
 		if (this.exactResult === void 0) {
 			this.exactResult = awaitAbortable(Promise.resolve().then(() => this.handle.result()), this.signal);
 			const settle = () => {
+				if (this.observedFrames === 0) this.lastObservedAt = Date.now();
 				this.exactResultSettled = true;
 			};
 			this.exactResult.then(settle, settle);
@@ -8763,12 +8862,14 @@ var RetainedObservation = class {
 			const exactWake = new Promise((resolve) => {
 				wake = setImmediate(() => {
 					const close = () => {
-						const flowing = this.sawTerminal || this.lastFrameAt === void 0 ? 0 : RETAINED_TAIL_FLOW_MS - (Date.now() - this.lastFrameAt);
+						const flowing = this.sawTerminal ? 0 : RETAINED_TAIL_FLOW_MS - (Date.now() - this.lastObservedAt);
 						if (flowing <= 0) {
 							resolve({ kind: "exact-result" });
 							return;
 						}
-						grace = setTimeout(() => resolve({ kind: "exact-result" }), flowing);
+						grace = setTimeout(() => {
+							wake = setImmediate(() => resolve({ kind: "exact-result" }));
+						}, flowing);
 						if (typeof grace.unref === "function") grace.unref();
 					};
 					unwatch = this.onExactResult(close);
@@ -8822,7 +8923,6 @@ var RetainedObservation = class {
 			this.seenEvents.set(eventId, digest);
 		}
 		this.lastObservedAt = Date.now();
-		this.lastFrameAt = this.lastObservedAt;
 		if (identity.cursor !== void 0) this.lastReplayPosition = identity.cursor;
 		else if (eventId !== void 0) this.lastReplayPosition = eventId;
 		if (isTerminalEnvironmentEvent(event)) this.sawTerminal = true;
@@ -8875,13 +8975,6 @@ var RetainedObservation = class {
 		return !failed;
 	}
 };
-// src/runtime/environment-provider/provider-validation-error.ts
-var ValidationError = class extends Error {
-	constructor(message, options) {
-		super(message, options);
-		this.name = "ValidationError";
-	}
-};
 // src/runtime/environment-provider/provider-turn-input.ts
 /**
 * Lower the seam's prompt options onto turn fields, through the one mapper this module already
@@ -9663,21 +9756,18 @@ var ProviderTurnSettlement = class {
 	}
 	/** Hand the workspace capture to the owner. Its receipt reaches the journal as evidence of this
 	*  invocation; a capture that fails leaves none, and the owner's release then keeps the source. */
-	handCaptureToOwner(reported, captureOutcome, publish, beforeCapture) {
+	handCaptureToOwner(reported, captureOutcome, settled) {
 		const { args, environment } = this;
+		this.finalCopyTaken = true;
 		args.retention?.onEndOfTurnWork?.((async () => {
-			const finalCopy = (async () => {
-				try {
-					await beforeCapture?.();
-				} catch {}
-			})();
+			const copy = settled ? args.scope.mirrors.finishNativeMirror(environment, "settled").catch(() => void 0) : Promise.resolve();
 			let snapshot;
 			try {
 				snapshot = await args.captureWorkspace(environment, captureOutcome);
 			} finally {
-				await finalCopy;
+				await copy;
 			}
-			if (publish) args.onPublishedSnapshot(snapshot);
+			if (settled) args.onPublishedSnapshot(snapshot);
 			if (snapshot === void 0) return;
 			await args.retention?.onEvidence?.({
 				...reported,
@@ -9723,7 +9813,23 @@ var ProviderTurnSettlement = class {
 			signal: args.signal
 		});
 		const deferCapture = this.ownerTakesCapture();
-		const { retainedWorkspace, workspaceCaptureFailure } = deferCapture ? {} : await this.captureSettledWorkspace(outcome);
+		/**
+		* A capture that fails or exceeds its deadline after settlement is a fact about the evidence,
+		* never the turn's outcome. On Runtime 0.295.4 a capture past its 1,200,000 ms
+		* deadline behind a two-slot queue shared by 34 workers threw an AbortError, the driver
+		* classified it terminal, and two research roots ended with 13 and 0 children settled. With no
+		* receipt the source stays preserved and the owner reads a retention failure; the turn is not re-run.
+		*/
+		let retainedWorkspace;
+		let workspaceCaptureFailure;
+		if (!deferCapture) {
+			try {
+				retainedWorkspace = await args.captureWorkspace(this.environment, outcome);
+			} catch (error) {
+				workspaceCaptureFailure = `${errorText(error instanceof Error ? error.message : error)}; source environment preserved`;
+			}
+			args.onPublishedSnapshot(retainedWorkspace);
+		}
 		const settledResult = {
 			...result,
 			...workspaceCaptureFailure === void 0 ? {} : { workspaceCaptureFailure },
@@ -9732,65 +9838,40 @@ var ProviderTurnSettlement = class {
 				workspaceCapture: this.captureReceipt(retainedWorkspace)
 			}
 		};
-		const settled = this.settledArtifact(result, settledResult, verdict, executionSpent);
+		const jsonOutput = args.options.outputFormat === "json";
+		if (jsonOutput) await args.retention?.onEvidence?.(settledResult);
+		const output = jsonOutput && outcome?.status !== "failed" ? jsonResultFromEvents(result.events) : { out: settledResult };
+		const statusCode = failureStatusCode(outcome);
+		const nativeFailure = outcome?.status === "failed" ? {
+			success: false,
+			...outcome.error ? { error: outcome.error } : {},
+			...outcome.errorCode ? { errorCode: outcome.errorCode } : {},
+			...statusCode === void 0 ? {} : { statusCode }
+		} : void 0;
+		const settled = {
+			...jsonOutput ? { outputFormat: "json" } : {},
+			...nativeFailure ? { outcome: nativeFailure } : {},
+			...output,
+			outRef: contentRef(`provider:${args.provider.name}`, output.out),
+			...verdict ? { verdict } : {},
+			spent: executionSpent
+		};
 		this.settled = settled;
-		this.unavailable = this.refusalOf(result);
+		if (args.mayContinue && this.retained && nativeFailure) {
+			const signal = unavailableSignalOfFailure({
+				...nativeFailure,
+				error: nativeFailure.error ?? ""
+			});
+			if (signal !== void 0) this.unavailable = {
+				signal,
+				cause: errorText(nativeFailure.error ?? "")
+			};
+		}
 		if (this.retained) await args.retention?.onResult(settled);
-		else if (retainedWorkspace !== void 0) await args.retention?.onEvidence?.(settledResult);
+		else if (retainedWorkspace !== void 0 && !jsonOutput) await args.retention?.onEvidence?.(settledResult);
 		args.scope.state.pending = false;
 		args.scope.state.artifact = settled;
-		if (deferCapture) {
-			this.finalCopyTaken = true;
-			this.handCaptureToOwner(settledResult, outcome, true, () => args.scope.mirrors.finishNativeMirror(this.environment, "settled"));
-		}
-	}
-	/**
-	* A capture that fails or exceeds its deadline after settlement is a fact about the evidence,
-	* never the turn's outcome. On Runtime 0.295.4 a capture past its 1,200,000 ms
-	* deadline behind a two-slot queue shared by 34 workers threw an AbortError, the driver
-	* classified it terminal, and two research roots ended with 13 and 0 children settled. With no
-	* receipt the source stays preserved and the owner reads a retention failure; the turn is not re-run.
-	*/
-	async captureSettledWorkspace(outcome) {
-		let retainedWorkspace;
-		let workspaceCaptureFailure;
-		try {
-			retainedWorkspace = await this.args.captureWorkspace(this.environment, outcome);
-		} catch (error) {
-			workspaceCaptureFailure = `${errorText(error instanceof Error ? error.message : error)}; source environment preserved`;
-		}
-		this.args.onPublishedSnapshot(retainedWorkspace);
-		return {
-			retainedWorkspace,
-			workspaceCaptureFailure
-		};
-	}
-	settledArtifact(result, settledResult, verdict, spent) {
-		return {
-			...result.outcome?.status === "failed" ? { outcome: {
-				success: false,
-				...result.outcome.error ? { error: result.outcome.error } : {},
-				...result.outcome.errorCode ? { errorCode: result.outcome.errorCode } : {},
-				...failureStatusCode(result.outcome) === void 0 ? {} : { statusCode: failureStatusCode(result.outcome) }
-			} } : {},
-			outRef: contentRef(`provider:${this.args.provider.name}`, settledResult),
-			out: settledResult,
-			...verdict ? { verdict } : {},
-			spent
-		};
-	}
-	/** A retained turn the upstream refused for capacity ends with its environment kept. */
-	refusalOf(result) {
-		if (!this.args.mayContinue || !this.retained || result.outcome?.status !== "failed") return;
-		const signal = unavailableSignalOfFailure({
-			error: result.outcome.error ?? "",
-			...result.outcome.errorCode ? { errorCode: result.outcome.errorCode } : {},
-			...failureStatusCode(result.outcome) === void 0 ? {} : { statusCode: failureStatusCode(result.outcome) }
-		});
-		return signal === void 0 ? void 0 : {
-			signal,
-			cause: errorText(result.outcome.error ?? "")
-		};
+		if (deferCapture) this.handCaptureToOwner(settledResult, outcome, true);
 	}
 	/** Record the turn's failure, then capture what evidence its environment still holds. */
 	async *fail(error) {
@@ -9810,17 +9891,11 @@ var ProviderTurnSettlement = class {
 		args.scope.state.settleTranscript();
 		if (this.ownerTakesCapture()) {
 			if (!args.signal.aborted) await args.scope.mirrors.finishNativeMirror(environment, "failed");
-			this.finalCopyTaken = true;
 			this.handCaptureToOwner({
 				...resultFromEvents(this.observer.archive.events(), this.observer.text),
 				outcome: failureOutcome
 			}, failureOutcome, false);
-		} else await this.captureFailedTurn(error, failureOutcome);
-		await this.readLiveTranscript();
-	}
-	async captureFailedTurn(error, failureOutcome) {
-		const { args } = this;
-		try {
+		} else try {
 			const retainedWorkspace = await args.captureWorkspace(this.environment, failureOutcome);
 			if (retainedWorkspace !== void 0 && args.retention?.onEvidence !== void 0) await args.retention.onEvidence({
 				...resultFromEvents(this.observer.archive.events(), this.observer.text),
@@ -9829,9 +9904,11 @@ var ProviderTurnSettlement = class {
 				workspaceCapture: this.captureReceipt(retainedWorkspace)
 			});
 		} catch (captureError) {
-			if (captureError instanceof Error && captureError !== error) this.failure = captureError.cause === void 0 ? Object.assign(captureError, { cause: this.failure }) : new AggregateError([captureError, this.failure], captureError.message, { cause: captureError });
-			else this.failure = captureError;
+			if (!(captureError instanceof Error) || captureError === error) this.failure = captureError;
+			else if (captureError.cause === void 0) this.failure = Object.assign(captureError, { cause: this.failure });
+			else this.failure = new AggregateError([captureError, this.failure], captureError.message, { cause: captureError });
 		}
+		await this.readLiveTranscript();
 	}
 	/** Runs on every way the turn ends: the last session copy, then the environment's fate. */
 	async release() {
@@ -9840,24 +9917,23 @@ var ProviderTurnSettlement = class {
 		if (!this.finalCopyTaken) await args.scope.mirrors.finishNativeMirror(this.environment, this.failed ? "failed" : this.settled !== void 0 ? "settled" : "interrupted");
 		const held = this.retained && this.settled !== void 0 && !this.failed && this.unavailable === void 0 && args.retention?.preserveEnvironment !== true && args.retention?.holdOnSettle?.(this.settled.spent) === true;
 		if (held) args.scope.state.holdingForContinuation = true;
-		if ((!this.retained || this.settled !== void 0 && !this.failed) && !(this.retained && args.retention?.preserveEnvironment) && !(this.unavailable !== void 0 && !this.failed) && !held && (args.options.destroyOnSettle ?? true)) await this.destroyEnvironment();
-	}
-	async destroyEnvironment() {
-		const cleanup = await destroyExecutorEnvironment(this.args.scope);
-		if (cleanup.destroyed) return;
-		const error = new Error(cleanup.detail ?? "provider environment teardown was not confirmed");
-		if (this.settled !== void 0) this.args.scope.state.artifact = {
-			...this.settled,
-			teardown: {
-				failed: true,
-				error: error.message,
-				at: (/* @__PURE__ */ new Date()).toISOString()
-			}
-		};
-		else if (!this.failed) {
-			this.failure = error;
-			this.failed = true;
-		} else this.failure = this.failure instanceof Error ? Object.assign(this.failure, { cause: this.failure.cause ?? error }) : this.failure;
+		if ((!this.retained || this.settled !== void 0 && !this.failed) && !(this.retained && args.retention?.preserveEnvironment) && !(this.unavailable !== void 0 && !this.failed) && !held && (args.options.destroyOnSettle ?? true)) {
+			const cleanup = await destroyExecutorEnvironment(this.args.scope);
+			if (cleanup.destroyed) return;
+			const error = new Error(cleanup.detail ?? "provider environment teardown was not confirmed");
+			if (this.settled !== void 0) this.args.scope.state.artifact = {
+				...this.settled,
+				teardown: {
+					failed: true,
+					error: error.message,
+					at: (/* @__PURE__ */ new Date()).toISOString()
+				}
+			};
+			else if (!this.failed) {
+				this.failure = error;
+				this.failed = true;
+			} else if (this.failure instanceof Error) Object.assign(this.failure, { cause: this.failure.cause ?? error });
+		}
 	}
 };
 // src/runtime/environment-provider/provider-usage-account.ts
@@ -10321,6 +10397,7 @@ function providerMaterialization(provider, createProfile, node, executionId, ret
 				provider: provider.name,
 				destroyOnSettle: retention?.preserveEnvironment ? false : options.destroyOnSettle ?? true,
 				requireTerminalEvent: options.requireTerminalEvent ?? true,
+				...options.outputFormat === void 0 ? {} : { outputFormat: options.outputFormat },
 				tokenLimits,
 				...placement ? { placement } : {}
 			}
@@ -10348,13 +10425,17 @@ function providerMaterialization(provider, createProfile, node, executionId, ret
 // src/runtime/environment-provider/provider-executor-lifecycle.ts
 function createProviderExecutor(provider, profile, ctx, options, placement) {
 	if (options.workspaceRetention !== void 0) assertProviderWorkspaceRetentionPort(options.workspaceRetention, `providerAsExecutor(${provider.name})`);
-	const node = ctx.node === void 0 ? void 0 : detachedSnapshot(ctx.node, "provider executor node");
+	const node = detachedSnapshot(ctx.node, "provider executor node");
 	const retention = retainedExecutorContext(ctx);
+	if (options.outputFormat !== void 0 && (options.outputFormat !== "json" || retention?.onEvidence === void 0 || options.requireTerminalEvent === false)) throw new ValidationError("providerAsExecutor: JSON output requires Runtime-owned durable evidence and a native terminal receipt");
 	const managerStop = readOptionalAbortSignal(ctx, bridgeStopSignalKey, "provider");
 	const createProfile = options.profileForCreate?.(profile) ?? profile;
 	if (placement && canonicalAgentProfileDigest(createProfile) !== canonicalAgentProfileDigest(profile)) throw new ValidationError("provider placement: profileForCreate cannot change the selected profile");
 	const executionId = retention?.executionId ?? node?.nodeId ?? `provider-run-${randomUUID()}`;
 	const state = new ProviderExecutorState(ctx.signal, executionId);
+	state.pending = admittedEnvironmentId(retention) !== void 0;
+	state.workspaceControlRef = admittedControlRef(retention);
+	state.providerSessionId = state.workspaceControlRef?.sessionId ?? null;
 	let executor;
 	const scope = {
 		provider,
@@ -14990,6 +15071,7 @@ function snapshotExecutorConfig(config) {
 			});
 		}
 		case "provider": {
+			if (config.outputFormat !== void 0 && config.steering !== void 0) throw new ValidationError$1("createExecutor(provider): JSON output is not supported with steering");
 			const { provider, registry, profileForCreate, taskToTurn, validator, workspaceRetention, shared, ...decisionData } = config;
 			if (shared !== void 0 && (decisionData.steering !== void 0 || decisionData.placements !== void 0 || workspaceRetention !== void 0)) throw new ValidationError$1("createExecutor(provider): shared placement cannot combine with steering, placements, or workspaceRetention");
 			const snapshot = detachedSnapshot(decisionData, "createExecutor provider config");
@@ -15054,6 +15136,7 @@ function snapshotExecutorConfig(config) {
 				"bridgeBearer",
 				"bridgeUrl",
 				"cwd",
+				"harnessTranscript",
 				"maxReconnects",
 				"modelCredential",
 				"modelSilenceMs",
@@ -15061,12 +15144,14 @@ function snapshotExecutorConfig(config) {
 				"sessionId",
 				"timeoutMs"
 			]), "createExecutor bridge config");
-			const { modelCredential, ...decisionData } = config;
+			const { modelCredential, harnessTranscript, ...decisionData } = config;
+			if (harnessTranscript !== void 0 && typeof harnessTranscript !== "function") throw new ValidationError$1("createExecutor bridge: harnessTranscript must be a capture function");
 			const snapshot = detachedSnapshot(decisionData, "createExecutor bridge config");
 			const capturedCredential = validateBridgeModelCredential(modelCredential, config.bridgeUrl, "createExecutor bridge config");
 			return Object.freeze({
 				...snapshot,
-				...capturedCredential === void 0 ? {} : { modelCredential: capturedCredential }
+				...capturedCredential === void 0 ? {} : { modelCredential: capturedCredential },
+				...harnessTranscript === void 0 ? {} : { harnessTranscript }
 			});
 		}
 		case "cli": return detachedSnapshot(config, `createExecutor ${config.backend} config`);
@@ -16968,20 +17053,10 @@ async function openRunTree(opts, now) {
 }
 async function resumeRunTree(opts, prior, now, runStartedAt, rootAttemptId) {
 	const runEpochMs = rootStartedAtMs(assertResumeContract(prior, opts));
-	const recoveryController = new AbortController();
-	const abortRecovery = () => recoveryController.abort(opts.signal?.reason);
-	if (opts.signal?.aborted) abortRecovery();
-	else opts.signal?.addEventListener("abort", abortRecovery, { once: true });
-	let restored;
-	try {
-		const cancelledAtEntry = opts.signal?.aborted === true && opts.signal.reason instanceof RunCancellationReason;
-		restored = await prepareScopeResume(opts, prior, recoveryController.signal, now, opts.runId, cancelledAtEntry);
-	} finally {
-		opts.signal?.removeEventListener("abort", abortRecovery);
-	}
-	const resumeFrom = restored.resumeFrom;
+	const cancelledAtEntry = opts.signal?.aborted === true && opts.signal.reason instanceof RunCancellationReason;
+	const { resumeFrom, poolRestore } = await prepareScopeResume(opts, prior, opts.signal ?? new AbortController().signal, now, opts.runId, cancelledAtEntry);
 	const events = [...resumeFrom.events];
-	const pool = createBudgetPool(opts.budget, runEpochMs, restored.poolRestore);
+	const pool = createBudgetPool(opts.budget, runEpochMs, poolRestore);
 	await recordRootSegment(opts, events, runStartedAt, false);
 	await recordRootReentered(opts, resumeFrom, runStartedAt);
 	return {
@@ -17343,4 +17418,4 @@ async function noWinner(settled, rejection) {
 }
 export { DEFAULT_PEER_MAIL_LIMITS as $, sandboxActProfileMaterialization as $t, createSandboxForSpec as A, ROUTER_PRICE_SOURCE as At, createRouterTranscript as B, runWorktreeHarness as Bt, createExecutor as C, checkVerdictOf as Ct, runAgentRounds as D, bridgeAdmissionRefusal as Dt, createSteerableSandboxSession as E, isFiniteNumber as Et, codeModeArguments as F, createPushTraceSource as Ft, LEAF_CONTINUATION_TASK as G, assertProfileMaterializes as Gt, createAgentEnvironmentProviderRegistry as H, harnessInvocation as Ht, codeModeModelOutput as I, bridgeRuntimeAttachmentsKey as It, createInPlaceCliExecutor as J, fullProfileMaterialization as Jt, providerAsSandboxClient as K, controlProfileMaterialization as Kt, createCodeModeTools as L, bridgeStopSignalKey as Lt, acquireSandbox as M, createCodexRolloutStoreReader as Mt, TERMINAL_DECISIONS as N, harnessUsageIsEmpty as Nt, assertBoxlessPromptOptions as O, bridgeModelRouteRefusal as Ot, defaultSelectWinner as P, readCodexRolloutSession as Pt, AUTHORITY_MARKERS as Q, renderUnsupported as Qt, runCodeMode as R, defaultRunCommand as Rt, captureReusableExecutorConfig as S, bestComposite as St, DEFAULT_SANDBOX_STEERING_MAX_TURNS as T, failedItems as Tt, resolveAgentEnvironmentProvider as U, terminateProcessTreeAndConfirm as Ut, routerBrain as V, LOCAL_HARNESSES as Vt, providerAsExecutor as W, assertProfileMaterialization as Wt, createInbox as X, promptControlProfileMaterialization as Xt, INBOX_RECEIPT_KEY as Y, profileMaterializationAxes$1 as Yt, failPendingAfter as Z, promptModelProfileMaterialization as Zt, withDriverExecutor as _, gateOnDeliverable as _t, assertRunParking as a, peerMailVerbNames as at, createExecutorRegistry as b, CONTINUATIONS_DIR as bt, sleepScopeWait as c, HarnessTurnFailedError as ct, runFinalizer as d, classifyDriverFailure as dt, sandboxProfileMaterialization as en, PEER_MAIL_WIRE_KEY as et, runTree as f, summarizeDriverAttempts as ft, isDriverSpec as g, gateFactoryOnDeliverable as gt, driverExecutorFactory as h, CheckUnavailableError as ht, RunParkedError as i, readSandboxOutcome as in, peerMailTools as it, createSandboxLineage as j, addHarnessUsage as jt, readPromptOptions as k, priceTokens as kt, withRunParking as l, abandonablePending as lt, driverChild as m, upstreamUnavailableSignal as mt, createSupervisor as n, worktreeCliProfileMaterialization as nn, createPeerMailbox as nt, bindScopeParkingDrain as o, taskToPrompt$1 as ot, createRootHandle as p, undispatchedCredentialExit as pt, createWorktreeCliExecutor as q, defineProfileMaterializationContract as qt, assertResumeLimits as r, projectSandboxOutcome as rn, isPeerMailEnvelope as rt, readRunParking as s, DriverAttemptsExhaustedError as st, DEFAULT_MAX_DEPTH as t, unsupportedProfileDimensions as tn, claimsAuthority as tt, bestDelivered as u, causedByPartialFailure as ut, InMemoryResultBlobStore as v, mapExecutorResult as vt, snapshotExecutorConfig as w, createContinuationKeeper as wt, bindReusableExecutorExecutionId as x, admitContinuationPolicy as xt, InMemorySpawnJournal as y, verdictFromJudgeScore as yt, toolResultText as z, runSettledCommand as zt };
 
-//# sourceMappingURL=supervisor-3JHXy3tz.js.map
+//# sourceMappingURL=supervisor-CORJv7-r.js.map