@tangle-network/agent-runtime 3.0.1 → 3.0.5

package/dist/{sandbox-profile-compat-DxegoIK5.js → sandbox-profile-compat-oFGWESLn.js}

@@ -31,14 +31,9 @@ function nativeSystemPrompt(harness, prompt, systemPath = ".tangle/system-prompt
 	};
 }
 // src/runtime/sandbox-profile-compat.ts
-/**
-* Interface 5.3 admits proxy secrets and private config values, but the current Sandbox SDK
-* carries Interface 4.0. Refuse these fields before either candidate conversion or a direct
-* Sandbox create can silently lose them. Remove this guard when Sandbox carries the fields.
-*/
+/** Refuse private config values that the Sandbox profile transport cannot carry. */
 function assertSandboxProfileCompatibility(profile, context = "candidate profile") {
 	if (!isRecord(profile)) return;
-	if (profile.proxySecrets !== void 0) refuseSandboxProfileField("proxySecrets", context);
 	if (isRecord(profile.mcp)) for (const [name, server] of Object.entries(profile.mcp)) {
 		if (!isRecord(server)) continue;
 		refuseNonPublicConfigValues(server.args, `mcp.${name}.args`, context);
@@ -62,4 +57,4 @@ function refuseSandboxProfileField(field, context = "candidate profile") {
 }
 export { refuseSandboxProfileField as n, nativeSystemPrompt as r, assertSandboxProfileCompatibility as t };
 
-//# sourceMappingURL=sandbox-profile-compat-DxegoIK5.js.map
+//# sourceMappingURL=sandbox-profile-compat-oFGWESLn.js.map

package/dist/sandbox-profile-compat-oFGWESLn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-profile-compat-oFGWESLn.js","names":[],"sources":["../src/agent/native-system-prompt.ts","../src/runtime/sandbox-profile-compat.ts"],"sourcesContent":["import { posix } from 'node:path'\nimport type { AgentProfilePrompt } from '@tangle-network/agent-interface'\nimport type { PlanFile } from '@tangle-network/agent-profile-materialize'\n\n/** Native replace and append controls shared by local and sealed candidate execution. */\nexport function nativeSystemPrompt(\n  harness: string,\n  prompt: Pick<AgentProfilePrompt, 'systemPrompt' | 'appendSystemPrompt'> | undefined,\n  systemPath = '.tangle/system-prompt.md',\n): { files: PlanFile[]; flags: string[] } {\n  const files: PlanFile[] = []\n  const flags: string[] = []\n  for (const intent of ['systemPrompt', 'appendSystemPrompt'] as const) {\n    const text = prompt?.[intent]\n    if (text === undefined) continue\n    if (typeof text !== 'string' || (intent === 'appendSystemPrompt' && !text.trim())) {\n      throw new Error(\n        `profile.prompt.${intent} must be ${intent === 'systemPrompt' ? 'a string' : 'non-empty text'}`,\n      )\n    }\n    const append = intent === 'appendSystemPrompt'\n    const path = append\n      ? posix.join(posix.dirname(systemPath), 'append-system-prompt.md')\n      : systemPath\n    if (harness === 'codex' && append) {\n      flags.push('-c', `developer_instructions=${JSON.stringify(text)}`)\n      continue\n    }\n    const flag =\n      harness === 'claude-code'\n        ? append\n          ? '--append-system-prompt-file'\n          : '--system-prompt-file'\n        : harness === 'pi' || harness === 'prime'\n          ? append\n            ? '--append-system-prompt'\n            : '--system-prompt'\n          : harness === 'codex'\n            ? '-c'\n            : undefined\n    if (!flag) throw new Error(`${harness} has no native ${intent} launch projection`)\n    files.push({\n      relPath: append ? '.tangle/append-system-prompt.md' : '.tangle/system-prompt.md',\n      content: text,\n      source: 'generated',\n    })\n    flags.push(flag, harness === 'codex' ? `model_instructions_file=${JSON.stringify(path)}` : path)\n  }\n  return { files, flags }\n}\n","import { isRecord } from '@tangle-network/agent-core'\nimport { ValidationError } from '../errors'\n\n/** Refuse private config values that the Sandbox profile transport cannot carry. */\nexport function assertSandboxProfileCompatibility(\n  profile: unknown,\n  context = 'candidate profile',\n): void {\n  if (!isRecord(profile)) return\n  if (isRecord(profile.mcp)) {\n    for (const [name, server] of Object.entries(profile.mcp)) {\n      if (!isRecord(server)) continue\n      refuseNonPublicConfigValues(server.args, `mcp.${name}.args`, context)\n      refuseNonPublicConfigValues(server.env, `mcp.${name}.env`, context)\n    }\n  }\n  if (isRecord(profile.hooks)) {\n    for (const [event, hooks] of Object.entries(profile.hooks)) {\n      if (!Array.isArray(hooks)) continue\n      for (const [index, hook] of hooks.entries()) {\n        if (!isRecord(hook)) continue\n        refuseNonPublicConfigValues(hook.args, `hooks.${event}[${index}].args`, context)\n        refuseNonPublicConfigValues(hook.env, `hooks.${event}[${index}].env`, context)\n      }\n    }\n  }\n}\n\nfunction refuseNonPublicConfigValues(values: unknown, path: string, context: string): void {\n  const entries = Array.isArray(values)\n    ? values.map((value, index) => [`${path}[${index}]`, value] as const)\n    : isRecord(values)\n      ? Object.entries(values).map(([name, value]) => [`${path}.${name}`, value] as const)\n      : []\n  for (const [field, value] of entries) {\n    if (isRecord(value) && value.kind !== 'public') {\n      refuseSandboxProfileField(`${field} (${String(value.kind)})`, context)\n    }\n  }\n}\n\nexport function refuseSandboxProfileField(field: string, context = 'candidate profile'): never {\n  throw new ValidationError(\n    `${context} field ${field} is refused: Sandbox's Interface 4.0.0 cannot carry it yet, and Runtime does not drop it`,\n  )\n}\n"],"mappings":";;;;;AAKA,SAAgB,mBACd,SACA,QACA,aAAa,4BAC2B;CACxC,MAAM,QAAoB,CAAC;CAC3B,MAAM,QAAkB,CAAC;CACzB,KAAK,MAAM,UAAU,CAAC,gBAAgB,oBAAoB,GAAY;EACpE,MAAM,OAAO,SAAS;EACtB,IAAI,SAAS,KAAA,GAAW;EACxB,IAAI,OAAO,SAAS,YAAa,WAAW,wBAAwB,CAAC,KAAK,KAAK,GAC7E,MAAM,IAAI,MACR,kBAAkB,OAAO,WAAW,WAAW,iBAAiB,aAAa,kBAC/E;EAEF,MAAM,SAAS,WAAW;EAC1B,MAAM,OAAO,SACT,MAAM,KAAK,MAAM,QAAQ,UAAU,GAAG,yBAAyB,IAC/D;EACJ,IAAI,YAAY,WAAW,QAAQ;GACjC,MAAM,KAAK,MAAM,0BAA0B,KAAK,UAAU,IAAI,GAAG;GACjE;EACF;EACA,MAAM,OACJ,YAAY,gBACR,SACE,gCACA,yBACF,YAAY,QAAQ,YAAY,UAC9B,SACE,2BACA,oBACF,YAAY,UACV,OACA,KAAA;EACV,IAAI,CAAC,MAAM,MAAM,IAAI,MAAM,GAAG,QAAQ,iBAAiB,OAAO,mBAAmB;EACjF,MAAM,KAAK;GACT,SAAS,SAAS,oCAAoC;GACtD,SAAS;GACT,QAAQ;EACV,CAAC;EACD,MAAM,KAAK,MAAM,YAAY,UAAU,2BAA2B,KAAK,UAAU,IAAI,MAAM,IAAI;CACjG;CACA,OAAO;EAAE;EAAO;CAAM;AACxB;;;AC7CA,SAAgB,kCACd,SACA,UAAU,qBACJ;CACN,IAAI,CAAC,SAAS,OAAO,GAAG;CACxB,IAAI,SAAS,QAAQ,GAAG,GACtB,KAAK,MAAM,CAAC,MAAM,WAAW,OAAO,QAAQ,QAAQ,GAAG,GAAG;EACxD,IAAI,CAAC,SAAS,MAAM,GAAG;EACvB,4BAA4B,OAAO,MAAM,OAAO,KAAK,QAAQ,OAAO;EACpE,4BAA4B,OAAO,KAAK,OAAO,KAAK,OAAO,OAAO;CACpE;CAEF,IAAI,SAAS,QAAQ,KAAK,GACxB,KAAK,MAAM,CAAC,OAAO,UAAU,OAAO,QAAQ,QAAQ,KAAK,GAAG;EAC1D,IAAI,CAAC,MAAM,QAAQ,KAAK,GAAG;EAC3B,KAAK,MAAM,CAAC,OAAO,SAAS,MAAM,QAAQ,GAAG;GAC3C,IAAI,CAAC,SAAS,IAAI,GAAG;GACrB,4BAA4B,KAAK,MAAM,SAAS,MAAM,GAAG,MAAM,SAAS,OAAO;GAC/E,4BAA4B,KAAK,KAAK,SAAS,MAAM,GAAG,MAAM,QAAQ,OAAO;EAC/E;CACF;AAEJ;AAEA,SAAS,4BAA4B,QAAiB,MAAc,SAAuB;CACzF,MAAM,UAAU,MAAM,QAAQ,MAAM,IAChC,OAAO,KAAK,OAAO,UAAU,CAAC,GAAG,KAAK,GAAG,MAAM,IAAI,KAAK,CAAU,IAClE,SAAS,MAAM,IACb,OAAO,QAAQ,MAAM,CAAC,CAAC,KAAK,CAAC,MAAM,WAAW,CAAC,GAAG,KAAK,GAAG,QAAQ,KAAK,CAAU,IACjF,CAAC;CACP,KAAK,MAAM,CAAC,OAAO,UAAU,SAC3B,IAAI,SAAS,KAAK,KAAK,MAAM,SAAS,UACpC,0BAA0B,GAAG,MAAM,IAAI,OAAO,MAAM,IAAI,EAAE,IAAI,OAAO;AAG3E;AAEA,SAAgB,0BAA0B,OAAe,UAAU,qBAA4B;CAC7F,MAAM,IAAI,gBACR,GAAG,QAAQ,SAAS,MAAM,yFAC5B;AACF"}

package/dist/{scope-BeI3tmVX.js → scope-C4ZapleE.js}

@@ -1,5 +1,5 @@
 import { c as RetainedInteractiveAdmissionError, d as RetainedRunDispatchBindingError, f as RuntimeRunStateError, l as RetainedInteractiveBindingError, m as ValidationError, r as BackendTransportError, u as RetainedRunAdmissionError } from "./errors-AzSuGI23.js";
-import { $ as isAsyncIterable, Ct as boundedChildDeadlineAt, Dt as teardownExecutor, Et as singleFlightTeardown, F as deepFreezeCandidate, G as chargedTokens, H as abortError, K as cloneSpend, St as armDeadlineTimer, U as addSpend, W as addTokenUsage, X as fnv1a32Hex, Y as errorMessage, Z as hasCompleteCacheBreakdown, a as verifyAgentCandidateWorkspaceArtifacts, at as sleep, dt as zeroSpend, ft as zeroTokenUsage, g as workspaceLimits, gt as withBudgetResources, h as verifyAgentCandidateWorkspaceArchive, ht as resourceTelemetry, i as readAgentCandidateWorkspaceArtifactFiles, j as verifiedArtifactChunks, k as verifyWorkspaceSnapshotArtifacts, m as safeArchivePath, mt as assertResources, o as verifyAgentCandidateWorkspaceTree, pt as addResourceSpend, q as cloneTokenUsage, tt as promptCacheTokenClasses, vt as CHILD_DEADLINE_REASON, wt as checkInIdleMs, z as sha256Bytes$1 } from "./workspace-streams-BSEkDu3H.js";
+import { $ as isAsyncIterable, Ct as boundedChildDeadlineAt, Dt as teardownExecutor, Et as singleFlightTeardown, F as deepFreezeCandidate, G as chargedTokens, H as abortError, K as cloneSpend, St as armDeadlineTimer, U as addSpend, W as addTokenUsage, X as fnv1a32Hex, Y as errorMessage, Z as hasCompleteCacheBreakdown, a as verifyAgentCandidateWorkspaceArtifacts, at as sleep, dt as zeroSpend, ft as zeroTokenUsage, g as workspaceLimits, gt as withBudgetResources, h as verifyAgentCandidateWorkspaceArchive, ht as resourceTelemetry, i as readAgentCandidateWorkspaceArtifactFiles, j as verifiedArtifactChunks, k as verifyWorkspaceSnapshotArtifacts, m as safeArchivePath, mt as assertResources, o as verifyAgentCandidateWorkspaceTree, pt as addResourceSpend, q as cloneTokenUsage, tt as promptCacheTokenClasses, vt as CHILD_DEADLINE_REASON, wt as checkInIdleMs, z as sha256Bytes$1 } from "./workspace-streams-COSTjQLW.js";
 import { _ as errorText, b as resolveRedactor, c as withJsonlFileLock, d as detachedSnapshot, f as shareParsedStrings, i as prepareJsonlAppend, l as sha256, m as errMessage, n as isNoEntError, o as readCommittedJsonLines, p as causeChain, t as appendCommittedJsonLine, v as defaultRedactor } from "./jsonl-file-BBP9Dz9w.js";
 import { t as assertExecutableAgentProfile } from "./model-policy-C-RGAUW4.js";
 import { a as writeAtomicDurableFile, n as assertNoSymlinkDescendant, o as captureRunWriteContext, r as publishExclusiveDurableFile, s as fenceRunWrite, t as appendDurableFile } from "./durable-file-DstVeHcj.js";
@@ -7705,30 +7705,15 @@ function createRetainedRunHandle(environment, session, initialControlRef, capabi
 	};
 }
 // src/runtime/retained-run-intent.ts
-/**
-* Project environment creation input into public digest material.
-*
-* Opaque values never enter the material or its digest. Public scalar fields
-* remain bound directly, while opaque records retain only their key names.
-* Secret names remain public binding data, so changing requested credentials
-* still conflicts before provider effects begin.
-*/
-/**
-* The pre-interface5 create-material projection: `requestedId`, `egress`,
-* `billingOwner`, and the workspace `snapshot` digest omitted — the shape
-* records persisted by the previous version digested. Accepted only when
-* validating replayed records (an upgrade must not strand an in-flight run
-* whose provider creation already completed); every new admission digests the
-* current projection.
-*/
+/** Replay-only projection of the create identity persisted before Interface 5. */
 function legacyRetainedCreateMaterial(environment) {
-	const { requestedId: _requestedId, egress: _egress, billingOwner: _billingOwner, workspace, ...preInterface5 } = environment;
-	return retainedCreateMaterial(workspace === void 0 ? preInterface5 : {
-		...preInterface5,
-		workspace: (() => {
-			const { snapshot: _snapshot, ...legacyWorkspace } = workspace;
-			return legacyWorkspace;
-		})()
+	const { snapshot: _snapshot, ...workspace } = environment.workspace ?? {};
+	return retainedCreateMaterial({
+		...environment,
+		requestedId: void 0,
+		egress: void 0,
+		billingOwner: void 0,
+		workspace: environment.workspace === void 0 ? void 0 : workspace
 	});
 }
 function retainedCreateMaterial(environment) {
@@ -7742,10 +7727,11 @@ function retainedCreateMaterial(environment) {
 		...environment.resources === void 0 ? {} : { resourcesDigest: canonicalCandidateDigest(publicResourceMaterial(environment.resources)) },
 		...environment.runtimeAttachments === void 0 ? {} : { runtimeAttachmentsDigest: canonicalCandidateDigest(environment.runtimeAttachments) },
 		...environment.name === void 0 ? {} : { name: environment.name },
-		...environment.env === void 0 ? {} : { environmentVariableNames: retainedObjectNames(environment.env) },
+		...environment.env === void 0 ? {} : { environmentVariableNames: Object.keys(environment.env).sort() },
 		...environment.secrets === void 0 ? {} : { secretNames: retainedSecretNames(environment.secrets) },
-		...environment.metadata === void 0 ? {} : { metadataKeys: retainedObjectNames(environment.metadata) },
-		...environment.providerOptions === void 0 ? {} : { providerOptionNames: retainedObjectNames(environment.providerOptions) }
+		...environment.proxySecrets === void 0 ? {} : { proxySecrets: environment.proxySecrets },
+		...environment.metadata === void 0 ? {} : { metadataKeys: Object.keys(environment.metadata).sort() },
+		...environment.providerOptions === void 0 ? {} : { providerOptionNames: Object.keys(environment.providerOptions).sort() }
 	};
 }
 /** Add the retained ownership marker without attaching turn identity. */
@@ -7764,7 +7750,7 @@ function publicWorkspaceMaterial(workspace) {
 		...workspace.cwd === void 0 ? {} : { cwd: workspace.cwd },
 		...workspace.checkpoint === void 0 ? {} : { checkpoint: workspace.checkpoint },
 		...workspace.snapshot === void 0 ? {} : { snapshotDigest: agentWorkspaceSnapshotRefDigest(workspace.snapshot) },
-		...workspace.providerOptions === void 0 ? {} : { providerOptionNames: retainedObjectNames(workspace.providerOptions) }
+		...workspace.providerOptions === void 0 ? {} : { providerOptionNames: Object.keys(workspace.providerOptions).sort() }
 	};
 }
 function publicResourceMaterial(resources) {
@@ -7773,14 +7759,13 @@ function publicResourceMaterial(resources) {
 		...resources.memoryMb === void 0 ? {} : { memoryMb: resources.memoryMb },
 		...resources.diskMb === void 0 ? {} : { diskMb: resources.diskMb },
 		...resources.gpu === void 0 ? {} : { gpu: resources.gpu },
-		...resources.providerOptions === void 0 ? {} : { providerOptionNames: retainedObjectNames(resources.providerOptions) }
+		...resources.providerOptions === void 0 ? {} : { providerOptionNames: Object.keys(resources.providerOptions).sort() }
 	};
 }
-function retainedObjectNames(value) {
-	return Object.keys(value).sort();
-}
 function retainedSecretNames(secrets) {
-	return Array.isArray(secrets) ? [...secrets].sort() : Object.keys(secrets).sort();
+	if (!Array.isArray(secrets)) return Object.keys(secrets).sort();
+	if (secrets.every((entry) => typeof entry === "string")) return [...secrets].sort();
+	return [...secrets].sort((a, b) => canonicalCandidateDigest(a).localeCompare(canonicalCandidateDigest(b)));
 }
 /** Project one headless turn into the material that `freshTurnInput` forwards. */
 function retainedTurnMaterial(input, contextTransfer) {
@@ -16794,4 +16779,4 @@ async function recoverRetainedChildren(args, children, spawn, next) {
 }
 export { deriveNodeExecutionIdentity as $, awaitAbortable$1 as $i, HARNESS_TRANSCRIPT_READ_LIMITS as $n, runtimeProviderCode as $r, describeRetainedNativeStops as $t, nestedScopeSeamKey as A, mapSandboxEvent as Ai, createPropagatingTraceEmitter as An, providerAttemptEvidence as Ar, scopeRetainedOwnerSettled as At, beginScopeOwnerAttempt as B, createSandboxTurnEventCollector as Bi, loopEventToOtelSpan as Bn, runtimeOwnedPendingExecutorMaterialization as Br, scopeRetainedOwnerJournalRoot as Bt, writeWorkerSteerAcknowledgement as C, createBudgetPool as Ci, workspaceCaptureReceipt as Cn, authoredAgentIdentity as Cr, resolveSpawnResourcePaths as Ct, isTraceAnalysisStore as D, spendFromUsageTotals as Di, WORKER_TRACE_PROPAGATION as Dn, knownExecutionBindingReceipt as Dr, scopeRetainedOwnerPriorSpend as Dt, replaySpawnTree as E, spendFromUsageEvents as Ei, resolveWorkerSlots as En, inheritRuntimeOwnedExecutorAttestation as Er, prepareScopeRetainedOwnerTask as Et, recoverRetainedInteractiveRun as F, terminalTextFromSandboxEvent as Fi, buildRuntimeEventOtelSpans as Fn, recordRuntimeOwnedProviderModel as Fr, scopeRetainedOwnerCheckpointing as Ft, scopeOwnerExecutorNodeContext as G, sandboxEventServedBackend as Gi, HARNESS_TRANSCRIPT_SETTLE_TIMEOUT_MS as Gn, executableAgentSpecSnapshot as Gr, driverRuntime as Gt, noteScopeOwnerPlannedExecution as H, extractLlmCallEvent as Hi, createRuntimeStreamEventCollector as Hn, unknownExecutionBindingReceipt as Hr, ownedTreeRootSpawn as Ht, startRetainedInteractiveRun as I, canonicalStreamEventFromSandboxEvent as Ii, createOpenInferenceFileExporter as In, runtimeOwnedDriveHarnessProviderEvidence as Ir, bindScopeRetainedOwnerEnvironmentId as It, providerVisibleProfile as J, decodeHarnessUsage as Ji, harnessTranscriptArtifact as Jn, runtimeFlowBrain as Jr, encodeResultBlob as Jt, coordinationMcpAlias as K, sandboxTerminalUsageField as Ki, captureBoundHarnessTranscript as Kn, isRuntimeFlowBrain as Kr, nestedDriverTreeRoot as Kt, FileSpawnJournal as L, extractTransportEventIdentity as Li, createOtelExporter as Ln, runtimeOwnedExecutorExecutionBinding as Lr, bindScopeRetainedOwnerProvider as Lt, attachWorker as M, sandboxLeafOutputFromEvents as Mi, readTraceContextFromEnv as Mn, recordRuntimeOwnedProviderAttemptStart as Mr, reconcileScopeRetainedOwnerEnvironment as Mt, readWorkerInteractiveBinding as N, sandboxOutputMarker as Ni, buildLoopOtelSpans as Nn, recordRuntimeOwnedProviderDispatchNotStarted as Nr, scopeRetainedOwnerRestorePoint as Nt, parseWorkerToolTraceArtifact as O, assertValidBudget as Oi, workerTraceEnv as On, knownMaterializationReceipt as Or, scopeRetainedOwnerResult as Ot, reconnectRetainedInteractiveRun as P, sandboxProgressEvents as Pi, buildLoopSpanNodes as Pn, recordRuntimeOwnedProviderIdentityConflict as Pr, noteScopeRetainedOwnerCoordination as Pt, assertRecursiveReservationPolicy as Q, assertEventBinding as Qi, readHarnessTranscript as Qn, runtimeFailureRemediationSchema as Qr, verifyWorkspaceMarker as Qt, appendSpawnEvents as R, assertSandboxServedModel as Ri, flatOtelSpan as Rn, runtimeOwnedExecutorMaterialization as Rr, retainedOwnerWorkspaceRetentionSeamKey as Rt, writeWorkerSteer as S, isCredentialRefusal as Si, openNativeMirror as Sn, attestRuntimeOwnedScopeOwner as Sr, environmentReader as St, sumSpendFromEvents as T, newUsageTotals as Ti, openSlotGroup as Tn, finalizeRuntimeOwnedPendingExecutor as Tr, consumeScopeRetainedOwnerResult as Tt, recordScopeOwnerMaterialization as U, isSandboxTerminalEvent as Ui, sanitizeKnowledgeReadinessReport as Un, unknownMaterializationReceipt as Ur, materializeTreeView as Ut, finalizeScopeOwnerMaterialization as V, createSandboxUsageLedger as Vi, createRuntimeEventCollector as Vn, runtimeOwnedScopeOwnerRuntime as Vr, loadSpawnForest as Vt, restoreScopeOwnerAcceptedExecution as W, notifySandboxEventObserver as Wi, sanitizeRuntimeStreamEvent as Wn, executableAgentProfileSnapshot as Wr, attestNestedDriverTreeOwner as Wt, reenteredWorkers as X, recordValue as Xi, harnessTranscriptUnavailable as Xn, runtimeFailureCause as Xr, closesCursorSlot as Xt, runtimeGraphMetadataKey as Y, parseCodexUsageRecord as Yi, harnessTranscriptFromLines as Yn, reportedFailureCause as Yr, SpawnEventIndex as Yt, settledToIteration as Z, RetainedRunProviderContractError as Zi, persistHarnessTranscript as Zn, runtimeFailureCauseSchema as Zr, insideCursorNamespace as Zt, supervisorRunDir as _, contentAddress as _i, DEFAULT_NATIVE_CAPTURE_INTERVAL_MS as _n, runAbortable as _r, startScopeRecoveries as _t, readRootStream as a, providerMessageText as aa, retainedExecutorContext as ai, startRetainedRun as an, describeToolArgs as ar, hasRetriableTeardowns as at, workerInboxFileFromEventDir as b, hashJson as bi, captureProviderWorkspaceSnapshot as bn, attestRuntimeOwnedExecutor as br, prepareScopeRetainedOwnerSeatSwitch as bt, cancelWorker as c, UNAVAILABLE_STATUSES as ci, acceptedInteractiveControl as cn, isTerminalNodeStatus as cr, recordScopeOwnerBarrenPause as ct, legacySupervisorRunsRoot as d, unavailablePauseMs as di, FileObserverJournal as dn, authoredSeatStages as dr, registerNestedTeardownScope as dt, exactSession as ea, settlementFailureCause as ei, stopRetainedNativeExecution as en, readBoundHarnessSessions as er, freeSlots as et, readWorkerCancelRequests as f, unavailableResumeAt as fi, createFileObserverHooks as fn, seatExecutionProfile as fr, releaseHeldEnvironments as ft, safeWorkerFile as g, TRACE_SUMMARY_SCHEMA as gi, environmentGone as gn, linkAbort as gr, settleManagerWork as gt, readWorkerSteerRequests as h, TRACE_ROOT_SCHEMA as hi, destroyInteractiveEnvironment as hn, abortReason as hr, retryUnconfirmedTeardowns as ht, nodeStreamFile as i, promptOptionsFromAgentTurnInput as ia, registerRetainedExecutorPreparation as ii, recoverRetainedRun as in, createActivityLog as ir, closeScopeAdmission as it, interactiveAdmissionSeamKey as j, mapSandboxToolEvent as ji, mergeTraceEnv as jn, recordRuntimeOwnedDriveHarnessProviderEvidence as jr, scopeRetainedOwnerTurnEnded as jt, workerTraceAnalysisStore as k, createSandboxToolPartState as ki, workerTraceHeaders as kn, newExecutionAttemptId as kr, beginScopeRetainedOwnerDrive as kt, claimWorkerSteerDelivery as l, cappedDoublingMs as li, offerInteractiveControl as ln, SeatChain as lr, recordScopeOwnerDriverAttempt as lt, readWorkerSteerAcknowledgement as m, unavailableSignalOfFailure as mi, verifyObserverRecords as mn, RunCancellationReason as mr, releaseRetainedEnvironments as mt, ROOT_STREAM_FILE as n, sameControlCoordinates as na, RetainedExecutionPendingError as ni, mintRetainedIdentity as nn, retainHarnessTranscript as nr, rollingDispatch as nt, readRootStreamReceipt as o, retainedExecutorSeamKey as oi, startRetainedRunInEnvironment as on, readWorkerProgress as or, meterRuntimeOwnedAccounting as ot, readWorkerCancellation as p, unavailableSignalInText as pi, observerRecordDigest as pn, subscriptionUsageLimitSignal as pr, releaseManagerEnvironment as pt, coordinationProfileToolPrefix as q, sumSandboxUsage as qi, captureHarnessTranscript as qn, runtimeFlowAgent as qr, FileResultBlobStore as qt, createRootStreamSink as r, promptFromAgentTurnInput as ra, isProvisioningRefusal as ri, reconnectRetainedRun as rn, DEFAULT_STALL_AFTER_MS as rr, closeRetainedSlots as rt, appendWorkerControlEvent as s, UNAVAILABLE_CODES as si, retainedCreateMaterial as sn, isLiveNodeStatus as sr, meterRuntimeOwnedProviderAttempt as st, createScope as t, freezeControlRef as ta, DISPATCH_NOT_ADMITTED_CODE as ti, assertRetainedRunReplayMaterial as tn, resolveHarnessTranscriptCapture as tr, queueOf as tt, legacySupervisorRunDir as u, jitteredMs as ui, prepareInteractiveDelegation as un, SeatChainExhaustedError as ur, recordScopeOwnerPause as ut, supervisorRunsRoot as v, contentRef as vi, assertProviderWorkspaceRetentionPort as vn, signalAbortError as vr, unconfirmedTeardowns as vt, prepareScopeResume as w, meterUsageEvent as wi, createWorkerSlots as wn, authoredProfileDigest as wr, abandonScopeRetainedOwnerInvocation as wt, writeWorkerCancellation as x, credentialCommandExit as xi, nativeCopyDelayMs as xn, attestRuntimeOwnedPendingExecutor as xr, scopeRetainedOwnerResourceReader as xt, workerCancellationsDir as y, executorFailure as yi, captureProviderLiveWorkspace as yn, attestRuntimeOwnedDeferredExecutor as yr, waitForScopeChildren as yt, spawnJournalRecordEvents as z, canonicalSandboxUsageMode as zi, generateSpanId as zn, runtimeOwnedExecutorProviderEvidence as zr, scopeRetainedOwnerContext as zt };
 
-//# sourceMappingURL=scope-BeI3tmVX.js.map
+//# sourceMappingURL=scope-C4ZapleE.js.map