@tangle-network/agent-runtime 3.0.16 → 3.0.17

package/dist/{supervisor-XWLIHK-U.js → supervisor-BFoJnigz.js}

@@ -1,5 +1,5 @@
 import { $i as parseCodexUsageRecord, A as nestedScopeSeamKey, An as workerTraceEnv, Ar as knownMaterializationReceipt, Bi as extractTransportEventIdentity, Br as runtimeOwnedExecutorMaterialization, Bt as retainedOwnerWorkspaceRetentionSeamKey, Ci as hashJson, Cn as nativeCopyDelayMs, Cr as attestRuntimeOwnedPendingExecutor, Dr as finalizeRuntimeOwnedPendingExecutor, Ei as createBudgetPool, Fi as sandboxLeafOutputFromEvents, Fr as recordRuntimeOwnedProviderDispatchNotStarted, Gr as unknownMaterializationReceipt, Hi as canonicalSandboxUsageMode, Ii as sandboxOutputMarker, Ir as recordRuntimeOwnedProviderIdentityConflict, Ji as sameModelId, Jt as nestedDriverTreeRoot, Ki as isSandboxTerminalEvent, Kr as executableAgentProfileSnapshot, Kt as attestNestedDriverTreeOwner, Li as sandboxProgressEvents, Lr as recordRuntimeOwnedProviderModel, Lt as scopeRetainedOwnerCheckpointing, Mi as createSandboxToolPartState, Nn as mergeTraceEnv, On as resolveWorkerSlots, Or as inheritRuntimeOwnedExecutorAttestation, Pr as recordRuntimeOwnedProviderAttemptStart, Q as assertRecursiveReservationPolicy, Qn as harnessTranscriptUnavailable, Qr as runtimeFailureCause, Qt as closesCursorSlot, R as appendSpawnEvents, Sn as captureProviderWorkspaceSnapshot, Sr as attestRuntimeOwnedExecutor, T as sumSpendFromEvents, Ti as isCredentialRefusal, Tn as workspaceCaptureReceipt, Ui as createSandboxTurnEventCollector, Ur as runtimeOwnedScopeOwnerRuntime, Ut as loadSpawnForest, V as finalizeScopeOwnerMaterialization, Vi as assertSandboxServedModel, Wi as createSandboxUsageLedger, Wr as unknownExecutionBindingReceipt, Wt as ownedTreeRootSpawn, X as reenteredWorkers, Xi as sandboxTerminalUsageField, Xt as encodeResultBlob, Yi as sandboxEventServedBackend, Yn as captureHarnessTranscript, Zn as harnessTranscriptFromLines, Zr as reportedFailureCause, Zt as SpawnEventIndex, _i as unavailableSignalOfFailure, _r as abortReason, _t as startScopeRecoveries, aa as freezeControlRef, ai as isProvisioningRefusal, an as reconnectRetainedRun, at as hasRetriableTeardowns, bi as contentAddress, bn as assertProviderWorkspaceRetentionPort, ca as promptOptionsFromAgentTurnInput, ci as retainedExecutorContext, di as UNAVAILABLE_STATUSES, dt as registerNestedTeardownScope, ea as recordValue, ei as runtimeFailureRemediationSchema, en as verifyWorkspaceMarker, ft as releaseHeldEnvironments, gi as unavailableSignalInText, gr as RunCancellationReason, gt as settleManagerWork, hr as subscriptionUsageLimitSignal, ht as retryUnconfirmedTeardowns, ia as exactSession, ii as RetainedExecutionPendingError, in as mintRetainedIdentity, ir as retainHarnessTranscript, it as closeScopeAdmission, jn as workerTraceHeaders, jr as newExecutionAttemptId, jt as scopeRetainedOwnerSettled, kn as WORKER_TRACE_PROPAGATION, kr as knownExecutionBindingReceipt, li as retainedExecutorSeamKey, lr as isLiveNodeStatus, mi as unavailablePauseMs, mt as releaseRetainedEnvironments, na as assertEventBinding, nn as stopRetainedNativeExecution, oa as sameControlCoordinates, oi as isSchemaRejection, on as recoverRetainedRun, or as createActivityLog, pt as releaseManagerEnvironment, qi as notifySandboxEventObserver, qn as HARNESS_TRANSCRIPT_SETTLE_TIMEOUT_MS, qr as executableAgentSpecSnapshot, qt as driverRuntime, ra as awaitAbortable, ri as DISPATCH_NOT_ADMITTED_CODE, rn as assertRetainedRunReplayMaterial, rt as closeRetainedSlots, sn as startRetainedRun, sr as describeToolArgs, t as createScope, ta as RetainedRunProviderContractError, ti as runtimeProviderCode, tn as describeRetainedNativeStops, ui as UNAVAILABLE_CODES, vn as environmentGone, vr as linkAbort, vt as unconfirmedTeardowns, w as prepareScopeResume, wi as credentialCommandExit, wn as openNativeMirror, xi as contentRef, xn as captureProviderLiveWorkspace, xr as attestRuntimeOwnedDeferredExecutor, yr as runAbortable, yt as waitForScopeChildren, zr as runtimeOwnedExecutorExecutionBinding } from "./scope-BKJ_SdfW.js";
-import { f as RuntimeRunStateError, i as ConfigError, m as ValidationError$1, r as BackendTransportError, t as AgentEvalError } from "./errors-AzSuGI23.js";
+import { f as RuntimeRunStateError, m as ValidationError$1, r as BackendTransportError, t as AgentEvalError } from "./errors-AzSuGI23.js";
 import { $ as isAsyncIterable, J as deleteBoxSafe, Ot as teardownSurfaces, Q as isAbortError, St as armDeadlineTimer, Tt as isDeadlineAbortReason, U as addSpend, V as hasControlCharacter, W as addTokenUsage, Y as errorMessage, _t as ACCEPTED_RESULT_GRACE_MS, at as sleep, ct as throwIfAborted, dt as zeroSpend, et as mapWithConcurrency, ft as zeroTokenUsage, gt as withBudgetResources, it as roundBoxMinutes, lt as unmeteredSpend, nt as randomSuffix, ot as stringifySafe, pt as addResourceSpend, q as cloneTokenUsage, rt as randomUuid, st as throwAbort, tt as promptCacheTokenClasses, ut as withTimeout, xt as ROOT_DEADLINE_REASON } from "./workspace-streams-8ALHaZzx.js";
 import { t as runTaskQueue } from "./task-queue-DbpZAp6C.js";
 import { _ as errorText, d as detachedSnapshot, g as errorProperty, h as errorHttpStatus, l as sha256, m as errMessage, p as causeChain, v as defaultRedactor } from "./jsonl-file-BBP9Dz9w.js";
@@ -5522,6 +5522,14 @@ const DETERMINISTIC_BRIDGE_CODES = /* @__PURE__ */ new Set([
 	"SEAT_NOT_LOGGED_IN"
 ]);
 /**
+* A model provider's content filter refuses the same prompt every time, so the turn is terminal
+* and the agent settles failed with this reason, for its parent to reword or re-scope the task.
+* Codex names it only in text, under the generic `AGENT_EXECUTION_FAILED`: on Discovery run
+* magnetar-rust-sandbox-20261031f two workers resent one refused prompt 6 and 5 times.
+*/
+const CONTENT_FILTER_REASON = "refused by the model provider's content filter";
+const isContentFilterRefusal = (error) => causeChain(error).some((cause) => cause instanceof Error && /\bcontent was flagged for possible\b/iu.test(errorProperty(cause, "message") ?? ""));
+/**
 * A driver's harness turn ran to its terminal result, and that result reported failure.
 *
 * A provider executor reports a failed turn as a returned outcome, not a thrown error, so without
@@ -5529,8 +5537,8 @@ const DETERMINISTIC_BRIDGE_CODES = /* @__PURE__ */ new Set([
 * A 53-minute turn ended `status code 524`, and another ended `Invalid API key` after a platform
 * key expired mid-turn. A new turn succeeds in both cases.
 *
-* `errorCode` is the provider's machine code when it reported one. The classifier reads the code
-* and never the text, because the text is written for people and changes without notice.
+* `errorCode` is the provider's machine code when it reported one. The classifier reads the code;
+* text decides only a printed capacity code and a content-filter refusal, which have none.
 */
 var HarnessTurnFailedError = class extends Error {
 	runtime;
@@ -5612,19 +5620,12 @@ function upstreamUnavailableSignal(error) {
 * `upstream_unavailable`) when the subscription account owner has no account with room.
 */
 function capacityCode(error) {
-	let code;
 	try {
-		code = Reflect.get(error, "code");
+		const code = Reflect.get(error, "code");
+		return typeof code === "string" && UNAVAILABLE_CODES.has(code.toLowerCase()) ? code.toLowerCase() : void 0;
 	} catch {
 		return;
 	}
-	if (typeof code !== "string") return void 0;
-	const normalized = code.toLowerCase();
-	return UNAVAILABLE_CODES.has(normalized) ? normalized : void 0;
-}
-/** True when the upstream refused for capacity and the same request will succeed later. */
-function isUpstreamUnavailable(error) {
-	return upstreamUnavailableSignal(error) !== void 0;
 }
 /**
 * Classify one driver failure. Runtime's own typed refusals are decisions and stay terminal; an
@@ -5649,23 +5650,20 @@ function classifyDriverFailure(error, signal, stopSignal) {
 	if (error instanceof Error && errorProperty(error, "name") === "AbortError") return stopSignal?.aborted === true ? "terminal" : "transient";
 	if (error instanceof Error && isProviderSchemaRejection(error)) return "terminal";
 	if (isCredentialRefusal(error)) return "terminal";
-	if (causeChain(error).some(isProvisioningRefusal)) return "terminal";
+	if (causeChain(error).some(isProvisioningRefusal) || isContentFilterRefusal(error)) return "terminal";
 	if (error instanceof HarnessTurnFailedError) {
 		if (error.errorCode !== void 0 && DETERMINISTIC_BRIDGE_CODES.has(error.errorCode)) return "terminal";
-		if (isUpstreamUnavailable(error)) return "unavailable";
+		if (upstreamUnavailableSignal(error) !== void 0) return "unavailable";
 		return foreignHttpStatusVerdict(error) ?? "transient";
 	}
 	if (error instanceof BackendTransportError) {
 		if (error.upstreamCode !== void 0 && DETERMINISTIC_BRIDGE_CODES.has(error.upstreamCode)) return "terminal";
-		if (isUpstreamUnavailable(error)) return "unavailable";
+		if (upstreamUnavailableSignal(error) !== void 0) return "unavailable";
 		const status = error.status;
-		if (status === void 0) return "transient";
-		if (status === 408 || status >= 500) return "transient";
-		return "terminal";
+		return status === void 0 || status === 408 || status >= 500 ? "transient" : "terminal";
 	}
-	if (error instanceof ValidationError$1 || error instanceof ConfigError || error instanceof RuntimeRunStateError) return "terminal";
 	if (error instanceof AgentEvalError) return "terminal";
-	if (isUpstreamUnavailable(error)) return "unavailable";
+	if (upstreamUnavailableSignal(error) !== void 0) return "unavailable";
 	return foreignHttpStatusVerdict(error) ?? "transient";
 }
 /** The credential command's exit code when it failed before Runtime journaled a dispatch: no
@@ -5738,7 +5736,7 @@ var DriverAttemptsExhaustedError = class extends RuntimeRunStateError {
 		const firstFailure = attempts.find((attempt) => attempt.error !== void 0)?.error;
 		const pauses = attempts.filter((attempt) => attempt.classification === "unavailable");
 		const pausedMs = pauses.reduce((sum, attempt) => sum + (attempt.retryInMs ?? 0), 0);
-		super(`supervisor driver failed after ${attempts.length} attempt(s) — stopped by ${stop}; ` + (pauses.length === 0 ? "" : `${pauses.length} attempt(s) met an unavailable upstream and paused ${Math.round(pausedMs / 1e3)} s in total; `) + (firstFailure !== void 0 && firstFailure !== last?.error ? `first failure: ${errorText(firstFailure)}; ` : "") + `last cause: ${causeText}` + (last?.classification ? ` (classified ${last.classification})` : ""), { cause });
+		super(`supervisor driver failed after ${attempts.length} attempt(s) — stopped by ${stop}` + (isContentFilterRefusal(cause) ? `: ${CONTENT_FILTER_REASON}; ` : "; ") + (pauses.length === 0 ? "" : `${pauses.length} attempt(s) met an unavailable upstream and paused ${Math.round(pausedMs / 1e3)} s in total; `) + (firstFailure !== void 0 && firstFailure !== last?.error ? `first failure: ${errorText(firstFailure)}; ` : "") + `last cause: ${causeText}` + (last?.classification ? ` (classified ${last.classification})` : ""), { cause });
 		this.attempts = Object.freeze([...attempts]);
 		this.stop = stop;
 	}
@@ -17427,4 +17425,4 @@ async function noWinner(settled, rejection) {
 }
 export { DEFAULT_PEER_MAIL_LIMITS as $, sandboxActProfileMaterialization as $t, createSandboxForSpec as A, ROUTER_PRICE_SOURCE as At, createRouterTranscript as B, runWorktreeHarness as Bt, createExecutor as C, checkVerdictOf as Ct, runAgentRounds as D, bridgeAdmissionRefusal as Dt, createSteerableSandboxSession as E, isFiniteNumber as Et, codeModeArguments as F, createPushTraceSource as Ft, LEAF_CONTINUATION_TASK as G, assertProfileMaterializes as Gt, createAgentEnvironmentProviderRegistry as H, harnessInvocation as Ht, codeModeModelOutput as I, bridgeRuntimeAttachmentsKey as It, createInPlaceCliExecutor as J, fullProfileMaterialization as Jt, providerAsSandboxClient as K, controlProfileMaterialization as Kt, createCodeModeTools as L, bridgeStopSignalKey as Lt, acquireSandbox as M, createCodexRolloutStoreReader as Mt, TERMINAL_DECISIONS as N, harnessUsageIsEmpty as Nt, assertBoxlessPromptOptions as O, bridgeModelRouteRefusal as Ot, defaultSelectWinner as P, readCodexRolloutSession as Pt, AUTHORITY_MARKERS as Q, renderUnsupported as Qt, runCodeMode as R, defaultRunCommand as Rt, captureReusableExecutorConfig as S, bestComposite as St, DEFAULT_SANDBOX_STEERING_MAX_TURNS as T, failedItems as Tt, resolveAgentEnvironmentProvider as U, terminateProcessTreeAndConfirm as Ut, routerBrain as V, LOCAL_HARNESSES as Vt, providerAsExecutor as W, assertProfileMaterialization as Wt, createInbox as X, promptControlProfileMaterialization as Xt, INBOX_RECEIPT_KEY as Y, profileMaterializationAxes$1 as Yt, failPendingAfter as Z, promptModelProfileMaterialization as Zt, withDriverExecutor as _, gateOnDeliverable as _t, assertRunParking as a, peerMailVerbNames as at, createExecutorRegistry as b, CONTINUATIONS_DIR as bt, sleepScopeWait as c, HarnessTurnFailedError as ct, runFinalizer as d, classifyDriverFailure as dt, sandboxProfileMaterialization as en, PEER_MAIL_WIRE_KEY as et, runTree as f, summarizeDriverAttempts as ft, isDriverSpec as g, gateFactoryOnDeliverable as gt, driverExecutorFactory as h, CheckUnavailableError as ht, RunParkedError as i, readSandboxOutcome as in, peerMailTools as it, createSandboxLineage as j, addHarnessUsage as jt, readPromptOptions as k, priceTokens as kt, withRunParking as l, abandonablePending as lt, driverChild as m, upstreamUnavailableSignal as mt, createSupervisor as n, worktreeCliProfileMaterialization as nn, createPeerMailbox as nt, bindScopeParkingDrain as o, taskToPrompt$1 as ot, createRootHandle as p, undispatchedCredentialExit as pt, createWorktreeCliExecutor as q, defineProfileMaterializationContract as qt, assertResumeLimits as r, projectSandboxOutcome as rn, isPeerMailEnvelope as rt, readRunParking as s, DriverAttemptsExhaustedError as st, DEFAULT_MAX_DEPTH as t, unsupportedProfileDimensions as tn, claimsAuthority as tt, bestDelivered as u, causedByPartialFailure as ut, InMemoryResultBlobStore as v, mapExecutorResult as vt, snapshotExecutorConfig as w, createContinuationKeeper as wt, bindReusableExecutorExecutionId as x, admitContinuationPolicy as xt, InMemorySpawnJournal as y, verdictFromJudgeScore as yt, toolResultText as z, runSettledCommand as zt };
 
-//# sourceMappingURL=supervisor-XWLIHK-U.js.map
+//# sourceMappingURL=supervisor-BFoJnigz.js.map