@tangle-network/agent-runtime 2.3.4 → 2.3.7

package/dist/{run-cancellation-BhP0Nw6G.js → run-cancellation-CzQZUlHr.js}

@@ -1,4 +1,4 @@
-import { o as appendWorkerControlEvent, y as workerCancellationsDir } from "./root-stream-To4qAc0e.js";
+import { o as appendWorkerControlEvent, v as workerCancellationsDir } from "./root-stream-Bsh5WFcg.js";
 import { a as writeAtomicDurableFile, n as assertNoSymlinkDescendant } from "./durable-file-DstVeHcj.js";
 import { existsSync, mkdirSync, readFileSync, watch } from "node:fs";
 import { join } from "node:path";
@@ -226,4 +226,4 @@ function isRunCancelRequest(value) {
 }
 export { runCancelRequestFile as a, writeRunCancellation as c, readRunCancellation as i, cancelRun as n, runCancellationFile as o, readRunCancelRequest as r, watchRunCancellation as s, applyRunCancellation as t };
 
-//# sourceMappingURL=run-cancellation-BhP0Nw6G.js.map
+//# sourceMappingURL=run-cancellation-CzQZUlHr.js.map

package/dist/{run-cancellation-BhP0Nw6G.js.map → run-cancellation-CzQZUlHr.js.map}

@@ -1 +1 @@
-{"version":3,"file":"run-cancellation-BhP0Nw6G.js","names":[],"sources":["../src/runtime/supervise/run-cancellation.ts"],"sourcesContent":["import { existsSync, mkdirSync, readFileSync, watch } from 'node:fs'\nimport { join } from 'node:path'\nimport type { RetainedRunEffect } from '../retained-run-types'\nimport { assertNoSymlinkDescendant, writeAtomicDurableFile } from './durable-file'\nimport { appendWorkerControlEvent, workerCancellationsDir } from './run-layout'\n\n/** Apply a durable request through the run's existing abort controller. */\nexport function applyRunCancellation(\n  dir: string,\n  abortRun: (reason: string, request?: RunCancelRequest) => void,\n  now: () => string,\n  path: 'observer' | 'turn-boundary' | 'fallback' = 'turn-boundary',\n): RunCancellation | undefined {\n  const request = readRunCancelRequest(dir)\n  if (request === undefined) return undefined\n  const prior = readRunCancellation(dir, request.operationId)\n  // A request acknowledged only as `cancel_requested` is still owed by this run: the process\n  // that issued the abort died before the run settled. Abort again; the record stands.\n  if (prior?.effect === 'cancel_requested') {\n    abortRun(request.reason ?? 'run cancel requested', request)\n  }\n  if (prior !== undefined) return prior\n  abortRun(request.reason ?? 'run cancel requested', request)\n  const observedAt = now()\n  const appliedAfterMs = Math.max(0, Date.parse(observedAt) - Date.parse(request.at))\n  const record: RunCancellation = {\n    operationId: request.operationId,\n    effect: 'cancel_requested',\n    path,\n    appliedAfterMs,\n    ...(request.deadlineMs === undefined\n      ? {}\n      : { deadlineExceeded: appliedAfterMs > request.deadlineMs }),\n    requestedAt: request.at,\n    observedAt,\n    ...(request.reason === undefined ? {} : { reason: request.reason }),\n    ...(request.operator === undefined ? {} : { operator: request.operator }),\n    detail: 'root abort issued to the whole run; termination not yet proven',\n  }\n  writeRunCancellation(dir, record)\n  return record\n}\n\n/** External drivers may remain silent indefinitely, so turn boundaries cannot observe control. */\nexport function watchRunCancellation(\n  dir: string,\n  abortRun: (reason: string, request?: RunCancelRequest) => void,\n  createWatch: typeof watch = watch,\n) {\n  mkdirSync(workerCancellationsDir(dir), { recursive: true })\n  let active = true\n  let failure: unknown\n  // One observer aborts its run once: a request this process already applied, or one a dead\n  // process acknowledged, is not re-issued on every poll.\n  let aborted = false\n  const abortOnce = (reason: string, request?: RunCancelRequest): void => {\n    if (aborted) return\n    aborted = true\n    abortRun(reason, request)\n  }\n  const check = (path: 'observer' | 'fallback' = 'observer'): void => {\n    if (failure !== undefined) throw failure\n    if (active) applyRunCancellation(dir, abortOnce, () => new Date().toISOString(), path)\n  }\n  const fail = (error: unknown): void => {\n    if (!active) return\n    failure = error\n    abortRun(`durable run cancellation observer failed: ${String(error)}`)\n  }\n  // The watcher is an optimization over the poll loop below (instant pickup instead of ≤100 ms).\n  // Creating it can fail for reasons that say NOTHING about this run: the host's inotify budget is\n  // exhausted (EMFILE — a shared box with many agents held ~110 of the 128 default user instances\n  // when this was measured), or the kernel caps watches (ENOSPC). Degrading to poll-only keeps\n  // every durable behavior; failing the run would make a neighboring process's resource use kill\n  // runs that never touched the limit. Any other creation error still fails loudly.\n  let watcher: ReturnType<typeof watch> | undefined\n  try {\n    watcher = createWatch(workerCancellationsDir(dir), (_event, filename) => {\n      if (!active || (filename !== null && filename !== 'run.request.json')) return\n      try {\n        check()\n      } catch (error) {\n        fail(error)\n      }\n    })\n  } catch (error) {\n    const code = (error as NodeJS.ErrnoException).code\n    if (code !== 'EMFILE' && code !== 'ENOSPC') throw error\n  }\n  watcher?.on('error', fail)\n  // Filesystem notifications are advisory. Scan the same durable inbox when one is dropped —\n  // and carry the whole observer alone whenever the watcher above could not be created.\n  const fallback = setInterval(() => {\n    try {\n      check('fallback')\n    } catch (error) {\n      fail(error)\n    }\n  }, 100)\n  fallback.unref()\n  return {\n    check,\n    close(): void {\n      active = false\n      watcher?.close()\n      clearInterval(fallback)\n    },\n  }\n}\n\n/** One durable run-scoped cancel request: cancel the WHOLE run, not one worker. */\nexport interface RunCancelRequest {\n  /** Caller-minted stable operation identifier — the idempotency key of the whole operation. */\n  readonly operationId: string\n  /** ISO timestamp of the write. */\n  readonly at: string\n  /** Who asked — 'human', a brain label, a tool name. Provenance, not authorization. */\n  readonly source: string\n  /** Requested observation target, measured by the acknowledgement's deadlineExceeded field.\n   * The observer always cascades eagerly. This does not guarantee scheduler latency or cleanup. */\n  readonly deadlineMs?: number\n  /** Who stops the run. `cancelRun` requires it on every new request; it is optional here only\n   *  so a request written before that rule still reads. The settle record carries it. */\n  readonly operator?: string\n  readonly reason?: string\n}\n\n/**\n * The durable acknowledgement state for the run-scoped cancel operation, keyed by `operationId`.\n * The runtime is the ONLY writer; {@link cancelRun} only reads it.\n *\n * `effect` is the same {@link RetainedRunEffect} vocabulary the worker-scoped and retained-run\n * paths use, so the runtime has one spelling of the four cancellation states:\n *  - `'unknown'`          — no runtime has answered yet. Never a success.\n *  - `'cancel_requested'` — the root manager issued the run's cascading abort; the run's terminal\n *                           state is not yet observed.\n *  - `'cancelled'`        — the run reached its terminal cancelled state with confirmed teardown.\n *  - `'not_live'`         — the run was not live to cancel: it settled on its own despite the\n *                           request, or it ended before the request was applied.\n */\nexport interface RunCancellation {\n  /** Runtime path that issued the cascade. */\n  readonly path?: 'observer' | 'turn-boundary' | 'fallback'\n  /** Runtime clock elapsed between request timestamp and cascade application. */\n  readonly appliedAfterMs?: number\n  /** Whether application exceeded the requested deadlineMs; absent when no target was requested. */\n  readonly deadlineExceeded?: boolean\n  readonly operationId: string\n  readonly effect: RetainedRunEffect\n  /** ISO timestamp of the original request. */\n  readonly requestedAt: string\n  /** ISO timestamp of the runtime's most recent observation of this operation. */\n  readonly observedAt: string\n  /** The caller's reason, carried verbatim from the request. */\n  readonly reason?: string\n  /** The caller's operator identity, carried verbatim from the request. */\n  readonly operator?: string\n  /** The runtime's explanation of how it arrived at `effect`. */\n  readonly detail?: string\n}\n\n/** The run-scoped cancel request file of one run — one {@link RunCancelRequest}. */\nexport function runCancelRequestFile(eventDir: string): string {\n  return join(workerCancellationsDir(eventDir), 'run.request.json')\n}\n\n/** The run-scoped acknowledgement file of one run — one {@link RunCancellation}. */\nexport function runCancellationFile(eventDir: string): string {\n  return join(workerCancellationsDir(eventDir), 'run.json')\n}\n\n/** Read the run-scoped cancel request, or `undefined` when none was written. */\nexport function readRunCancelRequest(eventDir: string): RunCancelRequest | undefined {\n  const dir = workerCancellationsDir(eventDir)\n  const file = runCancelRequestFile(eventDir)\n  assertNoSymlinkDescendant(eventDir, dir, 'run cancel request')\n  assertNoSymlinkDescendant(eventDir, file, 'run cancel request')\n  if (!existsSync(file)) return undefined\n  const parsed = JSON.parse(readFileSync(file, 'utf8')) as Partial<RunCancelRequest>\n  if (!isRunCancelRequest(parsed)) {\n    throw new Error(`run cancel request '${file}' is not a complete RunCancelRequest`)\n  }\n  return parsed\n}\n\n/**\n * Read the acknowledgement for the run-scoped cancel operation. `undefined` when the runtime has\n * not answered. A record holding a DIFFERENT `operationId` belongs to another operation on the\n * same run — fail loud rather than answer for it.\n */\nexport function readRunCancellation(\n  eventDir: string,\n  operationId: string,\n): RunCancellation | undefined {\n  const dir = workerCancellationsDir(eventDir)\n  const file = runCancellationFile(eventDir)\n  assertNoSymlinkDescendant(eventDir, dir, 'run cancel acknowledgement')\n  assertNoSymlinkDescendant(eventDir, file, 'run cancel acknowledgement')\n  if (!existsSync(file)) return undefined\n  const parsed = JSON.parse(readFileSync(file, 'utf8')) as RunCancellation\n  if (parsed.operationId !== operationId) {\n    throw new Error(\n      `run cancel acknowledgement '${file}' holds operation '${parsed.operationId}', not ` +\n        `'${operationId}' — one run carries one run-scoped cancel operation`,\n    )\n  }\n  return parsed\n}\n\n/**\n * Durably write the run-scoped acknowledgement. The shared writer fsyncs the file and containing\n * directory, so a concurrent reader sees the prior complete record or the new complete record.\n *\n * @internal The runtime is the only intended writer; clients read via {@link readRunCancellation}\n * or {@link cancelRun}.\n */\nexport function writeRunCancellation(eventDir: string, record: RunCancellation): void {\n  const dir = workerCancellationsDir(eventDir)\n  assertNoSymlinkDescendant(eventDir, dir, 'run cancel acknowledgement')\n  mkdirSync(dir, { recursive: true })\n  assertNoSymlinkDescendant(eventDir, dir, 'run cancel acknowledgement')\n  const file = runCancellationFile(eventDir)\n  assertNoSymlinkDescendant(eventDir, file, 'run cancel acknowledgement')\n  writeAtomicDurableFile(file, `${JSON.stringify(record, null, 2)}\\n`, { mode: 0o600 })\n}\n\n/**\n * Request the cancellation of the WHOLE run, idempotently, and return the operation's current\n * durable state.\n *\n * The run-scoped twin of {@link cancelWorker}: write the request into the run's cancellation\n * directory, where the run's own root manager applies it — aborting the root through the one\n * cascade controller the run already has, so every live worker comes down with it. This function\n * never applies the cancellation itself; writing a request file is not an acknowledgement.\n *\n * Idempotency is a lookup: when an acknowledgement for `operationId` already exists it is returned\n * AS-IS and nothing is written. A retry that changes the source, reason, deadline, or operator\n * fails closed. A request the runtime has not answered yet returns `effect: 'unknown'` (never a\n * success); call again with the same `operationId` — or {@link readRunCancellation} — to read the\n * acknowledged result after a reconnect.\n *\n * A run carries ONE run-scoped operation: a second request under a different `operationId` throws\n * rather than silently replacing the pending one, because both would claim the same single abort.\n * Reopening a settled run (`supervisePursuit`'s `reopen`) moves that operation aside.\n *\n * A NEW request must name its `operator`, so every stop says who made it. A replay of a request\n * or acknowledgement written before that rule is answered as it was.\n */\nexport function cancelRun(\n  eventDir: string,\n  operationId: string,\n  options: {\n    readonly reason?: string\n    readonly source?: string\n    readonly deadlineMs?: number\n    readonly operator?: string\n  } = {},\n): RunCancellation {\n  if (\n    options.deadlineMs !== undefined &&\n    (!Number.isFinite(options.deadlineMs) || options.deadlineMs < 0)\n  ) {\n    throw new Error('cancelRun: deadlineMs must be a finite nonnegative number')\n  }\n  const opId = operationId.trim()\n  if (!opId) throw new Error('cancelRun: operationId is empty')\n  const pending = readRunCancelRequest(eventDir)\n  if (pending !== undefined && pending.operationId !== opId) {\n    throw new Error(\n      `cancelRun: run cancel '${pending.operationId}' is already pending for this run; ` +\n        `read it with readRunCancellation instead of issuing '${opId}'`,\n    )\n  }\n  const candidate = {\n    operationId: opId,\n    source: options.source ?? 'human',\n    ...(options.reason === undefined ? {} : { reason: options.reason }),\n    ...(options.deadlineMs === undefined ? {} : { deadlineMs: options.deadlineMs }),\n    ...(options.operator === undefined ? {} : { operator: options.operator }),\n  }\n  if (pending !== undefined) assertSameRunCancelRequest(pending, candidate)\n  const acknowledged = readRunCancellation(eventDir, opId)\n  if (acknowledged !== undefined) {\n    if (pending === undefined && options.source !== undefined) {\n      throw new Error(\n        `cancelRun: operation '${opId}' cannot verify source without its admitted request`,\n      )\n    }\n    assertRunCancellationMatchesCandidate(acknowledged, candidate)\n    return acknowledged\n  }\n  // A new request names who stops the run. A replay of a request written before this rule keeps\n  // its absent operator: it was admitted above against the file it replays.\n  if (pending === undefined && (options.operator === undefined || options.operator.trim() === '')) {\n    throw new Error('cancelRun: operator is required; name who stops the run')\n  }\n  const source = options.source ?? 'human'\n  const request: RunCancelRequest = pending ?? {\n    operationId: opId,\n    at: new Date().toISOString(),\n    source,\n    ...(options.reason === undefined ? {} : { reason: options.reason }),\n    ...(options.deadlineMs === undefined ? {} : { deadlineMs: options.deadlineMs }),\n    ...(options.operator === undefined ? {} : { operator: options.operator }),\n  }\n  if (pending === undefined) {\n    const dir = workerCancellationsDir(eventDir)\n    assertNoSymlinkDescendant(eventDir, dir, 'run cancel request')\n    mkdirSync(dir, { recursive: true })\n    assertNoSymlinkDescendant(eventDir, dir, 'run cancel request')\n    const file = runCancelRequestFile(eventDir)\n    assertNoSymlinkDescendant(eventDir, file, 'run cancel request')\n    writeAtomicDurableFile(file, `${JSON.stringify(request, null, 2)}\\n`, { mode: 0o600 })\n    appendWorkerControlEvent(eventDir, 'run', {\n      kind: 'run-cancel-request',\n      operationId: opId,\n      source,\n      queued: true,\n      ...(options.reason === undefined ? {} : { reason: options.reason }),\n      ...(options.deadlineMs === undefined ? {} : { deadlineMs: options.deadlineMs }),\n      ...(options.operator === undefined ? {} : { operator: options.operator }),\n    })\n  }\n  return {\n    operationId: opId,\n    effect: 'unknown',\n    requestedAt: request.at,\n    observedAt: request.at,\n    ...(request.reason === undefined ? {} : { reason: request.reason }),\n    ...(request.operator === undefined ? {} : { operator: request.operator }),\n    detail: 'request queued; no runtime acknowledger has answered yet',\n  }\n}\n\ntype RunCancelRequestCandidate = Omit<RunCancelRequest, 'at'>\n\nfunction assertSameRunCancelRequest(\n  existing: RunCancelRequest,\n  candidate: RunCancelRequestCandidate,\n): void {\n  if (existing.operationId !== candidate.operationId) {\n    throw new Error(`cancelRun: operation '${candidate.operationId}' has an id collision`)\n  }\n  if (existing.source !== candidate.source) {\n    throw new Error(\n      `cancelRun: operation '${candidate.operationId}' conflicts with its admitted request ` +\n        `(source '${existing.source}' != '${candidate.source}')`,\n    )\n  }\n  if (existing.deadlineMs !== candidate.deadlineMs) {\n    throw new Error(\n      `cancelRun: operation '${candidate.operationId}' conflicts with its admitted request (deadlineMs differs)`,\n    )\n  }\n  if (existing.reason !== candidate.reason) {\n    throw new Error(\n      `cancelRun: operation '${candidate.operationId}' conflicts with its admitted request ` +\n        `(reason differs)`,\n    )\n  }\n  if (existing.operator !== candidate.operator) {\n    throw new Error(\n      `cancelRun: operation '${candidate.operationId}' conflicts with its admitted request ` +\n        `(operator '${existing.operator}' != '${candidate.operator}')`,\n    )\n  }\n}\n\nfunction assertRunCancellationMatchesCandidate(\n  existing: RunCancellation,\n  candidate: RunCancelRequestCandidate,\n): void {\n  if (existing.reason !== candidate.reason) {\n    throw new Error(\n      `cancelRun: operation '${candidate.operationId}' conflicts with its acknowledgement ` +\n        `(reason differs)`,\n    )\n  }\n  // An acknowledgement written before acknowledgements carried the operator (0.251.0) names none\n  // even when its admitted request does. The request comparator has already held the candidate\n  // to that request, so a legacy record matches any candidate operator; a record that names one\n  // must name the same one.\n  if (existing.operator !== undefined && existing.operator !== candidate.operator) {\n    throw new Error(\n      `cancelRun: operation '${candidate.operationId}' conflicts with its acknowledgement ` +\n        `(operator '${existing.operator}' != '${candidate.operator}')`,\n    )\n  }\n}\n\nfunction isRunCancelRequest(value: Partial<RunCancelRequest>): value is RunCancelRequest {\n  return (\n    typeof value.operationId === 'string' &&\n    value.operationId.length > 0 &&\n    typeof value.at === 'string' &&\n    typeof value.source === 'string' &&\n    (value.deadlineMs === undefined ||\n      (Number.isFinite(value.deadlineMs) && value.deadlineMs >= 0)) &&\n    (value.reason === undefined || typeof value.reason === 'string') &&\n    (value.operator === undefined || typeof value.operator === 'string')\n  )\n}\n"],"mappings":";;;;;;AAOA,SAAgB,qBACd,KACA,UACA,KACA,OAAkD,iBACrB;CAC7B,MAAM,UAAU,qBAAqB,GAAG;CACxC,IAAI,YAAY,KAAA,GAAW,OAAO,KAAA;CAClC,MAAM,QAAQ,oBAAoB,KAAK,QAAQ,WAAW;CAG1D,IAAI,OAAO,WAAW,oBACpB,SAAS,QAAQ,UAAU,wBAAwB,OAAO;CAE5D,IAAI,UAAU,KAAA,GAAW,OAAO;CAChC,SAAS,QAAQ,UAAU,wBAAwB,OAAO;CAC1D,MAAM,aAAa,IAAI;CACvB,MAAM,iBAAiB,KAAK,IAAI,GAAG,KAAK,MAAM,UAAU,IAAI,KAAK,MAAM,QAAQ,EAAE,CAAC;CAClF,MAAM,SAA0B;EAC9B,aAAa,QAAQ;EACrB,QAAQ;EACR;EACA;EACA,GAAI,QAAQ,eAAe,KAAA,IACvB,CAAC,IACD,EAAE,kBAAkB,iBAAiB,QAAQ,WAAW;EAC5D,aAAa,QAAQ;EACrB;EACA,GAAI,QAAQ,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO;EACjE,GAAI,QAAQ,aAAa,KAAA,IAAY,CAAC,IAAI,EAAE,UAAU,QAAQ,SAAS;EACvE,QAAQ;CACV;CACA,qBAAqB,KAAK,MAAM;CAChC,OAAO;AACT;;AAGA,SAAgB,qBACd,KACA,UACA,cAA4B,OAC5B;CACA,UAAU,uBAAuB,GAAG,GAAG,EAAE,WAAW,KAAK,CAAC;CAC1D,IAAI,SAAS;CACb,IAAI;CAGJ,IAAI,UAAU;CACd,MAAM,aAAa,QAAgB,YAAqC;EACtE,IAAI,SAAS;EACb,UAAU;EACV,SAAS,QAAQ,OAAO;CAC1B;CACA,MAAM,SAAS,OAAgC,eAAqB;EAClE,IAAI,YAAY,KAAA,GAAW,MAAM;EACjC,IAAI,QAAQ,qBAAqB,KAAK,kCAAiB,IAAI,KAAK,EAAA,CAAE,YAAY,GAAG,IAAI;CACvF;CACA,MAAM,QAAQ,UAAyB;EACrC,IAAI,CAAC,QAAQ;EACb,UAAU;EACV,SAAS,6CAA6C,OAAO,KAAK,GAAG;CACvE;CAOA,IAAI;CACJ,IAAI;EACF,UAAU,YAAY,uBAAuB,GAAG,IAAI,QAAQ,aAAa;GACvE,IAAI,CAAC,UAAW,aAAa,QAAQ,aAAa,oBAAqB;GACvE,IAAI;IACF,MAAM;GACR,SAAS,OAAO;IACd,KAAK,KAAK;GACZ;EACF,CAAC;CACH,SAAS,OAAO;EACd,MAAM,OAAQ,MAAgC;EAC9C,IAAI,SAAS,YAAY,SAAS,UAAU,MAAM;CACpD;CACA,SAAS,GAAG,SAAS,IAAI;CAGzB,MAAM,WAAW,kBAAkB;EACjC,IAAI;GACF,MAAM,UAAU;EAClB,SAAS,OAAO;GACd,KAAK,KAAK;EACZ;CACF,GAAG,GAAG;CACN,SAAS,MAAM;CACf,OAAO;EACL;EACA,QAAc;GACZ,SAAS;GACT,SAAS,MAAM;GACf,cAAc,QAAQ;EACxB;CACF;AACF;;AAsDA,SAAgB,qBAAqB,UAA0B;CAC7D,OAAO,KAAK,uBAAuB,QAAQ,GAAG,kBAAkB;AAClE;;AAGA,SAAgB,oBAAoB,UAA0B;CAC5D,OAAO,KAAK,uBAAuB,QAAQ,GAAG,UAAU;AAC1D;;AAGA,SAAgB,qBAAqB,UAAgD;CACnF,MAAM,MAAM,uBAAuB,QAAQ;CAC3C,MAAM,OAAO,qBAAqB,QAAQ;CAC1C,0BAA0B,UAAU,KAAK,oBAAoB;CAC7D,0BAA0B,UAAU,MAAM,oBAAoB;CAC9D,IAAI,CAAC,WAAW,IAAI,GAAG,OAAO,KAAA;CAC9B,MAAM,SAAS,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC;CACpD,IAAI,CAAC,mBAAmB,MAAM,GAC5B,MAAM,IAAI,MAAM,uBAAuB,KAAK,qCAAqC;CAEnF,OAAO;AACT;;;;;;AAOA,SAAgB,oBACd,UACA,aAC6B;CAC7B,MAAM,MAAM,uBAAuB,QAAQ;CAC3C,MAAM,OAAO,oBAAoB,QAAQ;CACzC,0BAA0B,UAAU,KAAK,4BAA4B;CACrE,0BAA0B,UAAU,MAAM,4BAA4B;CACtE,IAAI,CAAC,WAAW,IAAI,GAAG,OAAO,KAAA;CAC9B,MAAM,SAAS,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC;CACpD,IAAI,OAAO,gBAAgB,aACzB,MAAM,IAAI,MACR,+BAA+B,KAAK,qBAAqB,OAAO,YAAY,UACtE,YAAY,oDACpB;CAEF,OAAO;AACT;;;;;;;;AASA,SAAgB,qBAAqB,UAAkB,QAA+B;CACpF,MAAM,MAAM,uBAAuB,QAAQ;CAC3C,0BAA0B,UAAU,KAAK,4BAA4B;CACrE,UAAU,KAAK,EAAE,WAAW,KAAK,CAAC;CAClC,0BAA0B,UAAU,KAAK,4BAA4B;CACrE,MAAM,OAAO,oBAAoB,QAAQ;CACzC,0BAA0B,UAAU,MAAM,4BAA4B;CACtE,uBAAuB,MAAM,GAAG,KAAK,UAAU,QAAQ,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,IAAM,CAAC;AACtF;;;;;;;;;;;;;;;;;;;;;;;AAwBA,SAAgB,UACd,UACA,aACA,UAKI,CAAC,GACY;CACjB,IACE,QAAQ,eAAe,KAAA,MACtB,CAAC,OAAO,SAAS,QAAQ,UAAU,KAAK,QAAQ,aAAa,IAE9D,MAAM,IAAI,MAAM,2DAA2D;CAE7E,MAAM,OAAO,YAAY,KAAK;CAC9B,IAAI,CAAC,MAAM,MAAM,IAAI,MAAM,iCAAiC;CAC5D,MAAM,UAAU,qBAAqB,QAAQ;CAC7C,IAAI,YAAY,KAAA,KAAa,QAAQ,gBAAgB,MACnD,MAAM,IAAI,MACR,0BAA0B,QAAQ,YAAY,0FACY,KAAK,EACjE;CAEF,MAAM,YAAY;EAChB,aAAa;EACb,QAAQ,QAAQ,UAAU;EAC1B,GAAI,QAAQ,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO;EACjE,GAAI,QAAQ,eAAe,KAAA,IAAY,CAAC,IAAI,EAAE,YAAY,QAAQ,WAAW;EAC7E,GAAI,QAAQ,aAAa,KAAA,IAAY,CAAC,IAAI,EAAE,UAAU,QAAQ,SAAS;CACzE;CACA,IAAI,YAAY,KAAA,GAAW,2BAA2B,SAAS,SAAS;CACxE,MAAM,eAAe,oBAAoB,UAAU,IAAI;CACvD,IAAI,iBAAiB,KAAA,GAAW;EAC9B,IAAI,YAAY,KAAA,KAAa,QAAQ,WAAW,KAAA,GAC9C,MAAM,IAAI,MACR,yBAAyB,KAAK,oDAChC;EAEF,sCAAsC,cAAc,SAAS;EAC7D,OAAO;CACT;CAGA,IAAI,YAAY,KAAA,MAAc,QAAQ,aAAa,KAAA,KAAa,QAAQ,SAAS,KAAK,MAAM,KAC1F,MAAM,IAAI,MAAM,yDAAyD;CAE3E,MAAM,SAAS,QAAQ,UAAU;CACjC,MAAM,UAA4B,WAAW;EAC3C,aAAa;EACb,qBAAI,IAAI,KAAK,EAAA,CAAE,YAAY;EAC3B;EACA,GAAI,QAAQ,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO;EACjE,GAAI,QAAQ,eAAe,KAAA,IAAY,CAAC,IAAI,EAAE,YAAY,QAAQ,WAAW;EAC7E,GAAI,QAAQ,aAAa,KAAA,IAAY,CAAC,IAAI,EAAE,UAAU,QAAQ,SAAS;CACzE;CACA,IAAI,YAAY,KAAA,GAAW;EACzB,MAAM,MAAM,uBAAuB,QAAQ;EAC3C,0BAA0B,UAAU,KAAK,oBAAoB;EAC7D,UAAU,KAAK,EAAE,WAAW,KAAK,CAAC;EAClC,0BAA0B,UAAU,KAAK,oBAAoB;EAC7D,MAAM,OAAO,qBAAqB,QAAQ;EAC1C,0BAA0B,UAAU,MAAM,oBAAoB;EAC9D,uBAAuB,MAAM,GAAG,KAAK,UAAU,SAAS,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,IAAM,CAAC;EACrF,yBAAyB,UAAU,OAAO;GACxC,MAAM;GACN,aAAa;GACb;GACA,QAAQ;GACR,GAAI,QAAQ,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO;GACjE,GAAI,QAAQ,eAAe,KAAA,IAAY,CAAC,IAAI,EAAE,YAAY,QAAQ,WAAW;GAC7E,GAAI,QAAQ,aAAa,KAAA,IAAY,CAAC,IAAI,EAAE,UAAU,QAAQ,SAAS;EACzE,CAAC;CACH;CACA,OAAO;EACL,aAAa;EACb,QAAQ;EACR,aAAa,QAAQ;EACrB,YAAY,QAAQ;EACpB,GAAI,QAAQ,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO;EACjE,GAAI,QAAQ,aAAa,KAAA,IAAY,CAAC,IAAI,EAAE,UAAU,QAAQ,SAAS;EACvE,QAAQ;CACV;AACF;AAIA,SAAS,2BACP,UACA,WACM;CACN,IAAI,SAAS,gBAAgB,UAAU,aACrC,MAAM,IAAI,MAAM,yBAAyB,UAAU,YAAY,sBAAsB;CAEvF,IAAI,SAAS,WAAW,UAAU,QAChC,MAAM,IAAI,MACR,yBAAyB,UAAU,YAAY,iDACjC,SAAS,OAAO,QAAQ,UAAU,OAAO,GACzD;CAEF,IAAI,SAAS,eAAe,UAAU,YACpC,MAAM,IAAI,MACR,yBAAyB,UAAU,YAAY,2DACjD;CAEF,IAAI,SAAS,WAAW,UAAU,QAChC,MAAM,IAAI,MACR,yBAAyB,UAAU,YAAY,uDAEjD;CAEF,IAAI,SAAS,aAAa,UAAU,UAClC,MAAM,IAAI,MACR,yBAAyB,UAAU,YAAY,mDAC/B,SAAS,SAAS,QAAQ,UAAU,SAAS,GAC/D;AAEJ;AAEA,SAAS,sCACP,UACA,WACM;CACN,IAAI,SAAS,WAAW,UAAU,QAChC,MAAM,IAAI,MACR,yBAAyB,UAAU,YAAY,sDAEjD;CAMF,IAAI,SAAS,aAAa,KAAA,KAAa,SAAS,aAAa,UAAU,UACrE,MAAM,IAAI,MACR,yBAAyB,UAAU,YAAY,kDAC/B,SAAS,SAAS,QAAQ,UAAU,SAAS,GAC/D;AAEJ;AAEA,SAAS,mBAAmB,OAA6D;CACvF,OACE,OAAO,MAAM,gBAAgB,YAC7B,MAAM,YAAY,SAAS,KAC3B,OAAO,MAAM,OAAO,YACpB,OAAO,MAAM,WAAW,aACvB,MAAM,eAAe,KAAA,KACnB,OAAO,SAAS,MAAM,UAAU,KAAK,MAAM,cAAc,OAC3D,MAAM,WAAW,KAAA,KAAa,OAAO,MAAM,WAAW,cACtD,MAAM,aAAa,KAAA,KAAa,OAAO,MAAM,aAAa;AAE/D"}
+{"version":3,"file":"run-cancellation-CzQZUlHr.js","names":[],"sources":["../src/runtime/supervise/run-cancellation.ts"],"sourcesContent":["import { existsSync, mkdirSync, readFileSync, watch } from 'node:fs'\nimport { join } from 'node:path'\nimport type { RetainedRunEffect } from '../retained-run-types'\nimport { assertNoSymlinkDescendant, writeAtomicDurableFile } from './durable-file'\nimport { appendWorkerControlEvent, workerCancellationsDir } from './run-layout'\n\n/** Apply a durable request through the run's existing abort controller. */\nexport function applyRunCancellation(\n  dir: string,\n  abortRun: (reason: string, request?: RunCancelRequest) => void,\n  now: () => string,\n  path: 'observer' | 'turn-boundary' | 'fallback' = 'turn-boundary',\n): RunCancellation | undefined {\n  const request = readRunCancelRequest(dir)\n  if (request === undefined) return undefined\n  const prior = readRunCancellation(dir, request.operationId)\n  // A request acknowledged only as `cancel_requested` is still owed by this run: the process\n  // that issued the abort died before the run settled. Abort again; the record stands.\n  if (prior?.effect === 'cancel_requested') {\n    abortRun(request.reason ?? 'run cancel requested', request)\n  }\n  if (prior !== undefined) return prior\n  abortRun(request.reason ?? 'run cancel requested', request)\n  const observedAt = now()\n  const appliedAfterMs = Math.max(0, Date.parse(observedAt) - Date.parse(request.at))\n  const record: RunCancellation = {\n    operationId: request.operationId,\n    effect: 'cancel_requested',\n    path,\n    appliedAfterMs,\n    ...(request.deadlineMs === undefined\n      ? {}\n      : { deadlineExceeded: appliedAfterMs > request.deadlineMs }),\n    requestedAt: request.at,\n    observedAt,\n    ...(request.reason === undefined ? {} : { reason: request.reason }),\n    ...(request.operator === undefined ? {} : { operator: request.operator }),\n    detail: 'root abort issued to the whole run; termination not yet proven',\n  }\n  writeRunCancellation(dir, record)\n  return record\n}\n\n/** External drivers may remain silent indefinitely, so turn boundaries cannot observe control. */\nexport function watchRunCancellation(\n  dir: string,\n  abortRun: (reason: string, request?: RunCancelRequest) => void,\n  createWatch: typeof watch = watch,\n) {\n  mkdirSync(workerCancellationsDir(dir), { recursive: true })\n  let active = true\n  let failure: unknown\n  // One observer aborts its run once: a request this process already applied, or one a dead\n  // process acknowledged, is not re-issued on every poll.\n  let aborted = false\n  const abortOnce = (reason: string, request?: RunCancelRequest): void => {\n    if (aborted) return\n    aborted = true\n    abortRun(reason, request)\n  }\n  const check = (path: 'observer' | 'fallback' = 'observer'): void => {\n    if (failure !== undefined) throw failure\n    if (active) applyRunCancellation(dir, abortOnce, () => new Date().toISOString(), path)\n  }\n  const fail = (error: unknown): void => {\n    if (!active) return\n    failure = error\n    abortRun(`durable run cancellation observer failed: ${String(error)}`)\n  }\n  // The watcher is an optimization over the poll loop below (instant pickup instead of ≤100 ms).\n  // Creating it can fail for reasons that say NOTHING about this run: the host's inotify budget is\n  // exhausted (EMFILE — a shared box with many agents held ~110 of the 128 default user instances\n  // when this was measured), or the kernel caps watches (ENOSPC). Degrading to poll-only keeps\n  // every durable behavior; failing the run would make a neighboring process's resource use kill\n  // runs that never touched the limit. Any other creation error still fails loudly.\n  let watcher: ReturnType<typeof watch> | undefined\n  try {\n    watcher = createWatch(workerCancellationsDir(dir), (_event, filename) => {\n      if (!active || (filename !== null && filename !== 'run.request.json')) return\n      try {\n        check()\n      } catch (error) {\n        fail(error)\n      }\n    })\n  } catch (error) {\n    const code = (error as NodeJS.ErrnoException).code\n    if (code !== 'EMFILE' && code !== 'ENOSPC') throw error\n  }\n  watcher?.on('error', fail)\n  // Filesystem notifications are advisory. Scan the same durable inbox when one is dropped —\n  // and carry the whole observer alone whenever the watcher above could not be created.\n  const fallback = setInterval(() => {\n    try {\n      check('fallback')\n    } catch (error) {\n      fail(error)\n    }\n  }, 100)\n  fallback.unref()\n  return {\n    check,\n    close(): void {\n      active = false\n      watcher?.close()\n      clearInterval(fallback)\n    },\n  }\n}\n\n/** One durable run-scoped cancel request: cancel the WHOLE run, not one worker. */\nexport interface RunCancelRequest {\n  /** Caller-minted stable operation identifier — the idempotency key of the whole operation. */\n  readonly operationId: string\n  /** ISO timestamp of the write. */\n  readonly at: string\n  /** Who asked — 'human', a brain label, a tool name. Provenance, not authorization. */\n  readonly source: string\n  /** Requested observation target, measured by the acknowledgement's deadlineExceeded field.\n   * The observer always cascades eagerly. This does not guarantee scheduler latency or cleanup. */\n  readonly deadlineMs?: number\n  /** Who stops the run. `cancelRun` requires it on every new request; it is optional here only\n   *  so a request written before that rule still reads. The settle record carries it. */\n  readonly operator?: string\n  readonly reason?: string\n}\n\n/**\n * The durable acknowledgement state for the run-scoped cancel operation, keyed by `operationId`.\n * The runtime is the ONLY writer; {@link cancelRun} only reads it.\n *\n * `effect` is the same {@link RetainedRunEffect} vocabulary the worker-scoped and retained-run\n * paths use, so the runtime has one spelling of the four cancellation states:\n *  - `'unknown'`          — no runtime has answered yet. Never a success.\n *  - `'cancel_requested'` — the root manager issued the run's cascading abort; the run's terminal\n *                           state is not yet observed.\n *  - `'cancelled'`        — the run reached its terminal cancelled state with confirmed teardown.\n *  - `'not_live'`         — the run was not live to cancel: it settled on its own despite the\n *                           request, or it ended before the request was applied.\n */\nexport interface RunCancellation {\n  /** Runtime path that issued the cascade. */\n  readonly path?: 'observer' | 'turn-boundary' | 'fallback'\n  /** Runtime clock elapsed between request timestamp and cascade application. */\n  readonly appliedAfterMs?: number\n  /** Whether application exceeded the requested deadlineMs; absent when no target was requested. */\n  readonly deadlineExceeded?: boolean\n  readonly operationId: string\n  readonly effect: RetainedRunEffect\n  /** ISO timestamp of the original request. */\n  readonly requestedAt: string\n  /** ISO timestamp of the runtime's most recent observation of this operation. */\n  readonly observedAt: string\n  /** The caller's reason, carried verbatim from the request. */\n  readonly reason?: string\n  /** The caller's operator identity, carried verbatim from the request. */\n  readonly operator?: string\n  /** The runtime's explanation of how it arrived at `effect`. */\n  readonly detail?: string\n}\n\n/** The run-scoped cancel request file of one run — one {@link RunCancelRequest}. */\nexport function runCancelRequestFile(eventDir: string): string {\n  return join(workerCancellationsDir(eventDir), 'run.request.json')\n}\n\n/** The run-scoped acknowledgement file of one run — one {@link RunCancellation}. */\nexport function runCancellationFile(eventDir: string): string {\n  return join(workerCancellationsDir(eventDir), 'run.json')\n}\n\n/** Read the run-scoped cancel request, or `undefined` when none was written. */\nexport function readRunCancelRequest(eventDir: string): RunCancelRequest | undefined {\n  const dir = workerCancellationsDir(eventDir)\n  const file = runCancelRequestFile(eventDir)\n  assertNoSymlinkDescendant(eventDir, dir, 'run cancel request')\n  assertNoSymlinkDescendant(eventDir, file, 'run cancel request')\n  if (!existsSync(file)) return undefined\n  const parsed = JSON.parse(readFileSync(file, 'utf8')) as Partial<RunCancelRequest>\n  if (!isRunCancelRequest(parsed)) {\n    throw new Error(`run cancel request '${file}' is not a complete RunCancelRequest`)\n  }\n  return parsed\n}\n\n/**\n * Read the acknowledgement for the run-scoped cancel operation. `undefined` when the runtime has\n * not answered. A record holding a DIFFERENT `operationId` belongs to another operation on the\n * same run — fail loud rather than answer for it.\n */\nexport function readRunCancellation(\n  eventDir: string,\n  operationId: string,\n): RunCancellation | undefined {\n  const dir = workerCancellationsDir(eventDir)\n  const file = runCancellationFile(eventDir)\n  assertNoSymlinkDescendant(eventDir, dir, 'run cancel acknowledgement')\n  assertNoSymlinkDescendant(eventDir, file, 'run cancel acknowledgement')\n  if (!existsSync(file)) return undefined\n  const parsed = JSON.parse(readFileSync(file, 'utf8')) as RunCancellation\n  if (parsed.operationId !== operationId) {\n    throw new Error(\n      `run cancel acknowledgement '${file}' holds operation '${parsed.operationId}', not ` +\n        `'${operationId}' — one run carries one run-scoped cancel operation`,\n    )\n  }\n  return parsed\n}\n\n/**\n * Durably write the run-scoped acknowledgement. The shared writer fsyncs the file and containing\n * directory, so a concurrent reader sees the prior complete record or the new complete record.\n *\n * @internal The runtime is the only intended writer; clients read via {@link readRunCancellation}\n * or {@link cancelRun}.\n */\nexport function writeRunCancellation(eventDir: string, record: RunCancellation): void {\n  const dir = workerCancellationsDir(eventDir)\n  assertNoSymlinkDescendant(eventDir, dir, 'run cancel acknowledgement')\n  mkdirSync(dir, { recursive: true })\n  assertNoSymlinkDescendant(eventDir, dir, 'run cancel acknowledgement')\n  const file = runCancellationFile(eventDir)\n  assertNoSymlinkDescendant(eventDir, file, 'run cancel acknowledgement')\n  writeAtomicDurableFile(file, `${JSON.stringify(record, null, 2)}\\n`, { mode: 0o600 })\n}\n\n/**\n * Request the cancellation of the WHOLE run, idempotently, and return the operation's current\n * durable state.\n *\n * The run-scoped twin of {@link cancelWorker}: write the request into the run's cancellation\n * directory, where the run's own root manager applies it — aborting the root through the one\n * cascade controller the run already has, so every live worker comes down with it. This function\n * never applies the cancellation itself; writing a request file is not an acknowledgement.\n *\n * Idempotency is a lookup: when an acknowledgement for `operationId` already exists it is returned\n * AS-IS and nothing is written. A retry that changes the source, reason, deadline, or operator\n * fails closed. A request the runtime has not answered yet returns `effect: 'unknown'` (never a\n * success); call again with the same `operationId` — or {@link readRunCancellation} — to read the\n * acknowledged result after a reconnect.\n *\n * A run carries ONE run-scoped operation: a second request under a different `operationId` throws\n * rather than silently replacing the pending one, because both would claim the same single abort.\n * Reopening a settled run (`supervisePursuit`'s `reopen`) moves that operation aside.\n *\n * A NEW request must name its `operator`, so every stop says who made it. A replay of a request\n * or acknowledgement written before that rule is answered as it was.\n */\nexport function cancelRun(\n  eventDir: string,\n  operationId: string,\n  options: {\n    readonly reason?: string\n    readonly source?: string\n    readonly deadlineMs?: number\n    readonly operator?: string\n  } = {},\n): RunCancellation {\n  if (\n    options.deadlineMs !== undefined &&\n    (!Number.isFinite(options.deadlineMs) || options.deadlineMs < 0)\n  ) {\n    throw new Error('cancelRun: deadlineMs must be a finite nonnegative number')\n  }\n  const opId = operationId.trim()\n  if (!opId) throw new Error('cancelRun: operationId is empty')\n  const pending = readRunCancelRequest(eventDir)\n  if (pending !== undefined && pending.operationId !== opId) {\n    throw new Error(\n      `cancelRun: run cancel '${pending.operationId}' is already pending for this run; ` +\n        `read it with readRunCancellation instead of issuing '${opId}'`,\n    )\n  }\n  const candidate = {\n    operationId: opId,\n    source: options.source ?? 'human',\n    ...(options.reason === undefined ? {} : { reason: options.reason }),\n    ...(options.deadlineMs === undefined ? {} : { deadlineMs: options.deadlineMs }),\n    ...(options.operator === undefined ? {} : { operator: options.operator }),\n  }\n  if (pending !== undefined) assertSameRunCancelRequest(pending, candidate)\n  const acknowledged = readRunCancellation(eventDir, opId)\n  if (acknowledged !== undefined) {\n    if (pending === undefined && options.source !== undefined) {\n      throw new Error(\n        `cancelRun: operation '${opId}' cannot verify source without its admitted request`,\n      )\n    }\n    assertRunCancellationMatchesCandidate(acknowledged, candidate)\n    return acknowledged\n  }\n  // A new request names who stops the run. A replay of a request written before this rule keeps\n  // its absent operator: it was admitted above against the file it replays.\n  if (pending === undefined && (options.operator === undefined || options.operator.trim() === '')) {\n    throw new Error('cancelRun: operator is required; name who stops the run')\n  }\n  const source = options.source ?? 'human'\n  const request: RunCancelRequest = pending ?? {\n    operationId: opId,\n    at: new Date().toISOString(),\n    source,\n    ...(options.reason === undefined ? {} : { reason: options.reason }),\n    ...(options.deadlineMs === undefined ? {} : { deadlineMs: options.deadlineMs }),\n    ...(options.operator === undefined ? {} : { operator: options.operator }),\n  }\n  if (pending === undefined) {\n    const dir = workerCancellationsDir(eventDir)\n    assertNoSymlinkDescendant(eventDir, dir, 'run cancel request')\n    mkdirSync(dir, { recursive: true })\n    assertNoSymlinkDescendant(eventDir, dir, 'run cancel request')\n    const file = runCancelRequestFile(eventDir)\n    assertNoSymlinkDescendant(eventDir, file, 'run cancel request')\n    writeAtomicDurableFile(file, `${JSON.stringify(request, null, 2)}\\n`, { mode: 0o600 })\n    appendWorkerControlEvent(eventDir, 'run', {\n      kind: 'run-cancel-request',\n      operationId: opId,\n      source,\n      queued: true,\n      ...(options.reason === undefined ? {} : { reason: options.reason }),\n      ...(options.deadlineMs === undefined ? {} : { deadlineMs: options.deadlineMs }),\n      ...(options.operator === undefined ? {} : { operator: options.operator }),\n    })\n  }\n  return {\n    operationId: opId,\n    effect: 'unknown',\n    requestedAt: request.at,\n    observedAt: request.at,\n    ...(request.reason === undefined ? {} : { reason: request.reason }),\n    ...(request.operator === undefined ? {} : { operator: request.operator }),\n    detail: 'request queued; no runtime acknowledger has answered yet',\n  }\n}\n\ntype RunCancelRequestCandidate = Omit<RunCancelRequest, 'at'>\n\nfunction assertSameRunCancelRequest(\n  existing: RunCancelRequest,\n  candidate: RunCancelRequestCandidate,\n): void {\n  if (existing.operationId !== candidate.operationId) {\n    throw new Error(`cancelRun: operation '${candidate.operationId}' has an id collision`)\n  }\n  if (existing.source !== candidate.source) {\n    throw new Error(\n      `cancelRun: operation '${candidate.operationId}' conflicts with its admitted request ` +\n        `(source '${existing.source}' != '${candidate.source}')`,\n    )\n  }\n  if (existing.deadlineMs !== candidate.deadlineMs) {\n    throw new Error(\n      `cancelRun: operation '${candidate.operationId}' conflicts with its admitted request (deadlineMs differs)`,\n    )\n  }\n  if (existing.reason !== candidate.reason) {\n    throw new Error(\n      `cancelRun: operation '${candidate.operationId}' conflicts with its admitted request ` +\n        `(reason differs)`,\n    )\n  }\n  if (existing.operator !== candidate.operator) {\n    throw new Error(\n      `cancelRun: operation '${candidate.operationId}' conflicts with its admitted request ` +\n        `(operator '${existing.operator}' != '${candidate.operator}')`,\n    )\n  }\n}\n\nfunction assertRunCancellationMatchesCandidate(\n  existing: RunCancellation,\n  candidate: RunCancelRequestCandidate,\n): void {\n  if (existing.reason !== candidate.reason) {\n    throw new Error(\n      `cancelRun: operation '${candidate.operationId}' conflicts with its acknowledgement ` +\n        `(reason differs)`,\n    )\n  }\n  // An acknowledgement written before acknowledgements carried the operator (0.251.0) names none\n  // even when its admitted request does. The request comparator has already held the candidate\n  // to that request, so a legacy record matches any candidate operator; a record that names one\n  // must name the same one.\n  if (existing.operator !== undefined && existing.operator !== candidate.operator) {\n    throw new Error(\n      `cancelRun: operation '${candidate.operationId}' conflicts with its acknowledgement ` +\n        `(operator '${existing.operator}' != '${candidate.operator}')`,\n    )\n  }\n}\n\nfunction isRunCancelRequest(value: Partial<RunCancelRequest>): value is RunCancelRequest {\n  return (\n    typeof value.operationId === 'string' &&\n    value.operationId.length > 0 &&\n    typeof value.at === 'string' &&\n    typeof value.source === 'string' &&\n    (value.deadlineMs === undefined ||\n      (Number.isFinite(value.deadlineMs) && value.deadlineMs >= 0)) &&\n    (value.reason === undefined || typeof value.reason === 'string') &&\n    (value.operator === undefined || typeof value.operator === 'string')\n  )\n}\n"],"mappings":";;;;;;AAOA,SAAgB,qBACd,KACA,UACA,KACA,OAAkD,iBACrB;CAC7B,MAAM,UAAU,qBAAqB,GAAG;CACxC,IAAI,YAAY,KAAA,GAAW,OAAO,KAAA;CAClC,MAAM,QAAQ,oBAAoB,KAAK,QAAQ,WAAW;CAG1D,IAAI,OAAO,WAAW,oBACpB,SAAS,QAAQ,UAAU,wBAAwB,OAAO;CAE5D,IAAI,UAAU,KAAA,GAAW,OAAO;CAChC,SAAS,QAAQ,UAAU,wBAAwB,OAAO;CAC1D,MAAM,aAAa,IAAI;CACvB,MAAM,iBAAiB,KAAK,IAAI,GAAG,KAAK,MAAM,UAAU,IAAI,KAAK,MAAM,QAAQ,EAAE,CAAC;CAClF,MAAM,SAA0B;EAC9B,aAAa,QAAQ;EACrB,QAAQ;EACR;EACA;EACA,GAAI,QAAQ,eAAe,KAAA,IACvB,CAAC,IACD,EAAE,kBAAkB,iBAAiB,QAAQ,WAAW;EAC5D,aAAa,QAAQ;EACrB;EACA,GAAI,QAAQ,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO;EACjE,GAAI,QAAQ,aAAa,KAAA,IAAY,CAAC,IAAI,EAAE,UAAU,QAAQ,SAAS;EACvE,QAAQ;CACV;CACA,qBAAqB,KAAK,MAAM;CAChC,OAAO;AACT;;AAGA,SAAgB,qBACd,KACA,UACA,cAA4B,OAC5B;CACA,UAAU,uBAAuB,GAAG,GAAG,EAAE,WAAW,KAAK,CAAC;CAC1D,IAAI,SAAS;CACb,IAAI;CAGJ,IAAI,UAAU;CACd,MAAM,aAAa,QAAgB,YAAqC;EACtE,IAAI,SAAS;EACb,UAAU;EACV,SAAS,QAAQ,OAAO;CAC1B;CACA,MAAM,SAAS,OAAgC,eAAqB;EAClE,IAAI,YAAY,KAAA,GAAW,MAAM;EACjC,IAAI,QAAQ,qBAAqB,KAAK,kCAAiB,IAAI,KAAK,EAAA,CAAE,YAAY,GAAG,IAAI;CACvF;CACA,MAAM,QAAQ,UAAyB;EACrC,IAAI,CAAC,QAAQ;EACb,UAAU;EACV,SAAS,6CAA6C,OAAO,KAAK,GAAG;CACvE;CAOA,IAAI;CACJ,IAAI;EACF,UAAU,YAAY,uBAAuB,GAAG,IAAI,QAAQ,aAAa;GACvE,IAAI,CAAC,UAAW,aAAa,QAAQ,aAAa,oBAAqB;GACvE,IAAI;IACF,MAAM;GACR,SAAS,OAAO;IACd,KAAK,KAAK;GACZ;EACF,CAAC;CACH,SAAS,OAAO;EACd,MAAM,OAAQ,MAAgC;EAC9C,IAAI,SAAS,YAAY,SAAS,UAAU,MAAM;CACpD;CACA,SAAS,GAAG,SAAS,IAAI;CAGzB,MAAM,WAAW,kBAAkB;EACjC,IAAI;GACF,MAAM,UAAU;EAClB,SAAS,OAAO;GACd,KAAK,KAAK;EACZ;CACF,GAAG,GAAG;CACN,SAAS,MAAM;CACf,OAAO;EACL;EACA,QAAc;GACZ,SAAS;GACT,SAAS,MAAM;GACf,cAAc,QAAQ;EACxB;CACF;AACF;;AAsDA,SAAgB,qBAAqB,UAA0B;CAC7D,OAAO,KAAK,uBAAuB,QAAQ,GAAG,kBAAkB;AAClE;;AAGA,SAAgB,oBAAoB,UAA0B;CAC5D,OAAO,KAAK,uBAAuB,QAAQ,GAAG,UAAU;AAC1D;;AAGA,SAAgB,qBAAqB,UAAgD;CACnF,MAAM,MAAM,uBAAuB,QAAQ;CAC3C,MAAM,OAAO,qBAAqB,QAAQ;CAC1C,0BAA0B,UAAU,KAAK,oBAAoB;CAC7D,0BAA0B,UAAU,MAAM,oBAAoB;CAC9D,IAAI,CAAC,WAAW,IAAI,GAAG,OAAO,KAAA;CAC9B,MAAM,SAAS,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC;CACpD,IAAI,CAAC,mBAAmB,MAAM,GAC5B,MAAM,IAAI,MAAM,uBAAuB,KAAK,qCAAqC;CAEnF,OAAO;AACT;;;;;;AAOA,SAAgB,oBACd,UACA,aAC6B;CAC7B,MAAM,MAAM,uBAAuB,QAAQ;CAC3C,MAAM,OAAO,oBAAoB,QAAQ;CACzC,0BAA0B,UAAU,KAAK,4BAA4B;CACrE,0BAA0B,UAAU,MAAM,4BAA4B;CACtE,IAAI,CAAC,WAAW,IAAI,GAAG,OAAO,KAAA;CAC9B,MAAM,SAAS,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC;CACpD,IAAI,OAAO,gBAAgB,aACzB,MAAM,IAAI,MACR,+BAA+B,KAAK,qBAAqB,OAAO,YAAY,UACtE,YAAY,oDACpB;CAEF,OAAO;AACT;;;;;;;;AASA,SAAgB,qBAAqB,UAAkB,QAA+B;CACpF,MAAM,MAAM,uBAAuB,QAAQ;CAC3C,0BAA0B,UAAU,KAAK,4BAA4B;CACrE,UAAU,KAAK,EAAE,WAAW,KAAK,CAAC;CAClC,0BAA0B,UAAU,KAAK,4BAA4B;CACrE,MAAM,OAAO,oBAAoB,QAAQ;CACzC,0BAA0B,UAAU,MAAM,4BAA4B;CACtE,uBAAuB,MAAM,GAAG,KAAK,UAAU,QAAQ,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,IAAM,CAAC;AACtF;;;;;;;;;;;;;;;;;;;;;;;AAwBA,SAAgB,UACd,UACA,aACA,UAKI,CAAC,GACY;CACjB,IACE,QAAQ,eAAe,KAAA,MACtB,CAAC,OAAO,SAAS,QAAQ,UAAU,KAAK,QAAQ,aAAa,IAE9D,MAAM,IAAI,MAAM,2DAA2D;CAE7E,MAAM,OAAO,YAAY,KAAK;CAC9B,IAAI,CAAC,MAAM,MAAM,IAAI,MAAM,iCAAiC;CAC5D,MAAM,UAAU,qBAAqB,QAAQ;CAC7C,IAAI,YAAY,KAAA,KAAa,QAAQ,gBAAgB,MACnD,MAAM,IAAI,MACR,0BAA0B,QAAQ,YAAY,0FACY,KAAK,EACjE;CAEF,MAAM,YAAY;EAChB,aAAa;EACb,QAAQ,QAAQ,UAAU;EAC1B,GAAI,QAAQ,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO;EACjE,GAAI,QAAQ,eAAe,KAAA,IAAY,CAAC,IAAI,EAAE,YAAY,QAAQ,WAAW;EAC7E,GAAI,QAAQ,aAAa,KAAA,IAAY,CAAC,IAAI,EAAE,UAAU,QAAQ,SAAS;CACzE;CACA,IAAI,YAAY,KAAA,GAAW,2BAA2B,SAAS,SAAS;CACxE,MAAM,eAAe,oBAAoB,UAAU,IAAI;CACvD,IAAI,iBAAiB,KAAA,GAAW;EAC9B,IAAI,YAAY,KAAA,KAAa,QAAQ,WAAW,KAAA,GAC9C,MAAM,IAAI,MACR,yBAAyB,KAAK,oDAChC;EAEF,sCAAsC,cAAc,SAAS;EAC7D,OAAO;CACT;CAGA,IAAI,YAAY,KAAA,MAAc,QAAQ,aAAa,KAAA,KAAa,QAAQ,SAAS,KAAK,MAAM,KAC1F,MAAM,IAAI,MAAM,yDAAyD;CAE3E,MAAM,SAAS,QAAQ,UAAU;CACjC,MAAM,UAA4B,WAAW;EAC3C,aAAa;EACb,qBAAI,IAAI,KAAK,EAAA,CAAE,YAAY;EAC3B;EACA,GAAI,QAAQ,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO;EACjE,GAAI,QAAQ,eAAe,KAAA,IAAY,CAAC,IAAI,EAAE,YAAY,QAAQ,WAAW;EAC7E,GAAI,QAAQ,aAAa,KAAA,IAAY,CAAC,IAAI,EAAE,UAAU,QAAQ,SAAS;CACzE;CACA,IAAI,YAAY,KAAA,GAAW;EACzB,MAAM,MAAM,uBAAuB,QAAQ;EAC3C,0BAA0B,UAAU,KAAK,oBAAoB;EAC7D,UAAU,KAAK,EAAE,WAAW,KAAK,CAAC;EAClC,0BAA0B,UAAU,KAAK,oBAAoB;EAC7D,MAAM,OAAO,qBAAqB,QAAQ;EAC1C,0BAA0B,UAAU,MAAM,oBAAoB;EAC9D,uBAAuB,MAAM,GAAG,KAAK,UAAU,SAAS,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,IAAM,CAAC;EACrF,yBAAyB,UAAU,OAAO;GACxC,MAAM;GACN,aAAa;GACb;GACA,QAAQ;GACR,GAAI,QAAQ,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO;GACjE,GAAI,QAAQ,eAAe,KAAA,IAAY,CAAC,IAAI,EAAE,YAAY,QAAQ,WAAW;GAC7E,GAAI,QAAQ,aAAa,KAAA,IAAY,CAAC,IAAI,EAAE,UAAU,QAAQ,SAAS;EACzE,CAAC;CACH;CACA,OAAO;EACL,aAAa;EACb,QAAQ;EACR,aAAa,QAAQ;EACrB,YAAY,QAAQ;EACpB,GAAI,QAAQ,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO;EACjE,GAAI,QAAQ,aAAa,KAAA,IAAY,CAAC,IAAI,EAAE,UAAU,QAAQ,SAAS;EACvE,QAAQ;CACV;AACF;AAIA,SAAS,2BACP,UACA,WACM;CACN,IAAI,SAAS,gBAAgB,UAAU,aACrC,MAAM,IAAI,MAAM,yBAAyB,UAAU,YAAY,sBAAsB;CAEvF,IAAI,SAAS,WAAW,UAAU,QAChC,MAAM,IAAI,MACR,yBAAyB,UAAU,YAAY,iDACjC,SAAS,OAAO,QAAQ,UAAU,OAAO,GACzD;CAEF,IAAI,SAAS,eAAe,UAAU,YACpC,MAAM,IAAI,MACR,yBAAyB,UAAU,YAAY,2DACjD;CAEF,IAAI,SAAS,WAAW,UAAU,QAChC,MAAM,IAAI,MACR,yBAAyB,UAAU,YAAY,uDAEjD;CAEF,IAAI,SAAS,aAAa,UAAU,UAClC,MAAM,IAAI,MACR,yBAAyB,UAAU,YAAY,mDAC/B,SAAS,SAAS,QAAQ,UAAU,SAAS,GAC/D;AAEJ;AAEA,SAAS,sCACP,UACA,WACM;CACN,IAAI,SAAS,WAAW,UAAU,QAChC,MAAM,IAAI,MACR,yBAAyB,UAAU,YAAY,sDAEjD;CAMF,IAAI,SAAS,aAAa,KAAA,KAAa,SAAS,aAAa,UAAU,UACrE,MAAM,IAAI,MACR,yBAAyB,UAAU,YAAY,kDAC/B,SAAS,SAAS,QAAQ,UAAU,SAAS,GAC/D;AAEJ;AAEA,SAAS,mBAAmB,OAA6D;CACvF,OACE,OAAO,MAAM,gBAAgB,YAC7B,MAAM,YAAY,SAAS,KAC3B,OAAO,MAAM,OAAO,YACpB,OAAO,MAAM,WAAW,aACvB,MAAM,eAAe,KAAA,KACnB,OAAO,SAAS,MAAM,UAAU,KAAK,MAAM,cAAc,OAC3D,MAAM,WAAW,KAAA,KAAa,OAAO,MAAM,WAAW,cACtD,MAAM,aAAa,KAAA,KAAa,OAAO,MAAM,aAAa;AAE/D"}

package/dist/{runtime-DVwFHx7i.js → runtime-BlAFJYEs.js}

@@ -1,22 +1,22 @@
-import { Et as readPromptOptions, F as coordinationProfileToolPrefix, Ot as createSandboxLineage, Qn as CheckUnavailableError, R as settledToIteration, Rt as routerBrain, Tt as assertBoxlessPromptOptions, U as rollingDispatch, _ as withDriverExecutor, _t as createExecutorRegistry, an as createWorktreeCliExecutor, b as isTraceAnalysisStore, bt as createExecutor, er as gateOnDeliverable, gt as InMemorySpawnJournal, ht as InMemoryResultBlobStore, jt as defaultSelectWinner, li as executableAgentProfileSnapshot, n as createSupervisor, nr as verdictFromJudgeScore, tr as mapExecutorResult, ui as executableAgentSpecSnapshot, wt as runAgentRounds, xr as runAbortable } from "./supervisor-ByarsrwH.js";
+import { Et as readPromptOptions, F as coordinationProfileToolPrefix, Ot as createSandboxLineage, Qn as CheckUnavailableError, R as settledToIteration, Rt as routerBrain, Tt as assertBoxlessPromptOptions, U as rollingDispatch, _ as withDriverExecutor, _t as createExecutorRegistry, an as createWorktreeCliExecutor, b as isTraceAnalysisStore, bt as createExecutor, er as gateOnDeliverable, gt as InMemorySpawnJournal, ht as InMemoryResultBlobStore, jt as defaultSelectWinner, li as executableAgentProfileSnapshot, n as createSupervisor, nr as verdictFromJudgeScore, tr as mapExecutorResult, ui as executableAgentSpecSnapshot, wt as runAgentRounds, xr as runAbortable } from "./supervisor-B8beIEqH.js";
 import { i as ConfigError, m as ValidationError, n as AnalystError, s as PlannerError } from "./errors-AzSuGI23.js";
-import { D as runAgentic, E as refine, M as renderReport, N as profileChatClient, O as sample, j as observe, k as ObservationError, v as loadAuthoredStrategy, x as strategyAuthorContract, y as requestStrategySource } from "./structural-rollout-C49iL5Cn.js";
+import { D as runAgentic, E as refine, M as renderReport, N as profileChatClient, O as sample, j as observe, k as ObservationError, v as loadAuthoredStrategy, x as strategyAuthorContract, y as requestStrategySource } from "./structural-rollout-BUqZsIhX.js";
 import { F as armDeadlineTimer, a as cloneSpend, c as errorMessage, d as isAbortError, f as isAsyncIterable, h as randomSuffix, i as chargedTokens, l as fnv1a32Hex, n as addSpend, p as mapWithConcurrency, u as hasCompleteCacheBreakdown, v as sleep, w as zeroSpend, y as stringifySafe } from "./util-BX20UJ9X.js";
-import { Ut as notifySandboxEventObserver, dt as contentAddress, j as insideCursorNamespace, z as runtimeFailureCauseSchema, zt as createSandboxTurnEventCollector } from "./root-stream-To4qAc0e.js";
+import { A as insideCursorNamespace, Ht as notifySandboxEventObserver, R as runtimeFailureCauseSchema, Rt as createSandboxTurnEventCollector, ut as contentAddress } from "./root-stream-Bsh5WFcg.js";
 import { a as readCommittedJsonFile, c as withJsonlFileLock, d as detachedSnapshot, n as isNoEntError, o as readCommittedJsonLines, s as upsertCommittedJsonLine, t as appendCommittedJsonLine, u as detachedFrozen } from "./jsonl-file-BBP9Dz9w.js";
 import { a as concreteProfileModel, c as profileModelExecutionSettings, i as concreteModelId, l as profileProviderModel, o as enforceTokenLimits, p as canonicalObservedModelParts, t as assertExecutableAgentProfile, v as harnessRunsAgent } from "./model-policy-C-RGAUW4.js";
 import { B as sha256Bytes$1, C as WorkspaceScanLimitError, E as captureMaterializedWorkspace, P as canonicalCandidateDigest$1, R as immutableCandidateValue, h as markPutStreamVerified } from "./sandbox-profile-compat-DRiz9kME.js";
 import { a as writeAtomicDurableFile } from "./durable-file-DstVeHcj.js";
 import { i as notifyRuntimeHookEvent } from "./runtime-hooks-CsW2pfFk.js";
-import { a as reconcileInterruptedSearchCalls, c as searchExecutor, r as dedicatedLane, x as runtimeShipDecision } from "./search-executor-DRzb2WwZ.js";
-import { a as downMessageRefusalReasons, g as foldCoordinationRecords, p as createInMemoryRunContext } from "./coordination-manager-BxnEJXsv.js";
-import { E as validateFlowGraph, I as kernelPromptRegistry, _ as coordinationControlToolNames, k as validateGraphTopology, t as supervise, y as runBrainLoop } from "./supervise-BwUx_gjv.js";
-import "./run-cancellation-BhP0Nw6G.js";
+import { a as reconcileInterruptedSearchCalls, c as searchExecutor, r as dedicatedLane, x as runtimeShipDecision } from "./search-executor-CMPbMvpr.js";
+import { a as downMessageRefusalReasons, g as foldCoordinationRecords, p as createInMemoryRunContext } from "./coordination-manager-DNrb7zMg.js";
+import { E as validateFlowGraph, I as kernelPromptRegistry, _ as coordinationControlToolNames, k as validateGraphTopology, t as supervise, y as runBrainLoop } from "./supervise-Dm0Goys6.js";
+import "./run-cancellation-CzQZUlHr.js";
 import { _ as compileGraphParameters, a as graphRegistry, b as graphRouteWhenSchema, d as recordGraphRun, g as bindGraphParameters, h as assertGraphTriggerBindings, i as graphFromStored, l as lookupGraph, m as taskShapeDigest, o as graphRunsFor, r as graphDigest, t as digestOfGraph, v as graphTriggerBindingsSchema, y as graphFileSchema } from "./graph-registry-72DlMnUl.js";
 import { i as redactProtectedValue, r as redactProtectedReason } from "./protected-redaction-DilFZch5.js";
-import "./provision-supervisor-DG4E0Viy.js";
-import "./delegate-Drwq3e6S.js";
-import "./graph-Bio7TWRa.js";
+import "./provision-supervisor-Pd95wA1X.js";
+import "./delegate-oqIu6L-E.js";
+import "./graph-FLVwpg79.js";
 import { agentProfileSchema, canonicalAgentProfileDigest, canonicalCandidateDigest, sha256Bytes, validateAgentProfileSecurity } from "@tangle-network/agent-interface";
 import { CODING_HARNESSES, DEFAULT_TRACE_ANALYST_KINDS, InMemoryTraceStore, OUTPUT_VALUE, benjaminiHochberg, buildTrajectory, computeFindingId as computeFindingId$1, confidenceInterval, createTraceAnalyst, expandProfileAxes, makeFinding as makeFinding$1, pairedBootstrap, paretoFrontier, wilcoxonSignedRank, wilson } from "@tangle-network/agent-eval";
 import { createAgentRunOutcomeTracker } from "@tangle-network/sandbox/runtime";
@@ -10045,4 +10045,4 @@ function tail(s) {
 }
 export { runBenchmark as $, renderLeaderboardHtml as $t, searchPresets as A, sanitizeMcpToolSchema as At, graphFromSessionFacts as B, assertDeclaredCheck as Bt, withUntrackedArtifacts as C, harvestCorpus as Ct, SEARCH_SPEC_CORRELATION_KEY as D, connectStdioMcp as Dt, createFencedSqlRunContext as E, McpSpawnFault as Et, loadProfile as F, secretEnvOfMcpServer as Ft, chatWorkerSeam as G, readDeclaredCheck as Gt, loadGraphFile as H, declaredCheckDeliverable as Ht, pickBestProfile as I, inlineSandboxClient as It, strategyTournament as J, deterministicCompletion as Jt, createChatSessionStore as K, runIsolatedCheck as Kt, profileRegistry as L, loopCampaignDispatch as Lt, connectRemoteSupervisor as M, mcpSecretEnvMetadataKey as Mt, connectRemoteSupervisorControl as N, resolveMcpServerLaunch as Nt, assertSearchSpec as O, materializeLocalMcp as Ot, bestProfileFor as P, resolveSecretEnv as Pt, printBenchmarkReport as Q, pairwiseSignificance as Qt, profileRunsForName as R, loopDispatch as Rt, copyUntrackedIntoClone as S, HarvestError as St, validateStoredGraph as T, resolveSandboxClient as Tt, graphDesignerExtraTools as U, declaredCheckDigest as Ut, GraphFileResolutionError as V, checkProgramDigest as Vt, chatTransportExecutor as W, declaredCheckJudge as Wt, openSandboxRun as X, stopSentinel as Xt, SandboxRunAbortError as Y, sentinelCompletion as Yt, createS3PrivateCasStore as Z, leaderboard as Zt, NOTE_MAX_CHARS as _, buildSteerContext as _t, localShell as a, FileCorpus as at, composeWorkerEvidence as b, observationFromRegistry as bt, createVerifierEnvironment as c, fanout as ct, harvestSurfaceDiffs as d, panel as dt, renderLeaderboardMarkdown as en, createPrivateCasArtifactPort as et, analystsFromRegistry as f, pipeline as ft, EVIDENCE_MAX_CHARS as g, assertTraceDerivedFindings as gt, runCoderChecks as h, widen as ht, jjWorkspace as i, openSqlRunStore as in, runPersonified as it, searchSpecDigest as j, envKeyProvider as jt, compileSearchSpec as k, createMcpEnvironment as kt, boxSurfaceReader as l, flatWidenGate as lt, worktreeFanout as m, verify as mt, makeFinding$1 as n, renderPairwiseMarkdown as nn, trajectoryReport as nt, runInWorkspace as o, InMemoryCorpus as ot, failuresAnalyst as p, selectValidWinner as pt, runStrategyEvolution as q, completionAuthorizes as qt, gitWorkspace as r, SqlRunOwnershipError as rn, definePersona as rt, createWaterfallCollector as s, renderCorpusToInstructions as st, computeFindingId$1 as t, renderLeaderboardSvg as tn, equalKOnCost as tt, fsSurfaceReader as u, loopUntil as ut, VERIFY_TAIL_CHARS as v, createScopeAnalyst as vt, analyzeTrace as w, defineLeaderboard as wt, settledWorkerOut as x, inProcessSandboxClient as xt, closingWorkerNote as y, registryScopeAnalyst as yt, recordProfileRun as z, superviseDispatch as zt };
 
-//# sourceMappingURL=runtime-DVwFHx7i.js.map
+//# sourceMappingURL=runtime-BlAFJYEs.js.map