@tangle-network/agent-runtime 3.0.18 → 3.0.20

package/dist/{scope-BKJ_SdfW.js → scope-B7AKskjP.js}

@@ -1,6 +1,6 @@
 import { c as RetainedInteractiveAdmissionError, d as RetainedRunDispatchBindingError, f as RuntimeRunStateError, l as RetainedInteractiveBindingError, m as ValidationError, r as BackendTransportError, u as RetainedRunAdmissionError } from "./errors-AzSuGI23.js";
 import { $ as isAsyncIterable, Ct as boundedChildDeadlineAt, Dt as teardownExecutor, Et as singleFlightTeardown, F as deepFreezeCandidate, G as chargedTokens, H as abortError, K as cloneSpend, St as armDeadlineTimer, U as addSpend, W as addTokenUsage, X as fnv1a32Hex, Y as errorMessage, Z as hasCompleteCacheBreakdown, a as verifyAgentCandidateWorkspaceArtifacts, at as sleep, dt as zeroSpend, ft as zeroTokenUsage, g as workspaceLimits, gt as withBudgetResources, h as verifyAgentCandidateWorkspaceArchive, ht as resourceTelemetry, i as readAgentCandidateWorkspaceArtifactFiles, j as verifiedArtifactChunks, k as verifyWorkspaceSnapshotArtifacts, m as safeArchivePath, mt as assertResources, o as verifyAgentCandidateWorkspaceTree, pt as addResourceSpend, q as cloneTokenUsage, tt as promptCacheTokenClasses, vt as CHILD_DEADLINE_REASON, wt as checkInIdleMs, z as sha256Bytes$1 } from "./workspace-streams-8ALHaZzx.js";
-import { _ as errorText, b as resolveRedactor, c as withJsonlFileLock, d as detachedSnapshot, f as shareParsedStrings, i as prepareJsonlAppend, l as sha256, m as errMessage, n as isNoEntError, o as readCommittedJsonLines, p as causeChain, t as appendCommittedJsonLine, v as defaultRedactor } from "./jsonl-file-BBP9Dz9w.js";
+import { _ as errorText, b as resolveRedactor, c as withJsonlFileLock, d as detachedSnapshot, f as shareParsedStrings, g as errorProperty, i as prepareJsonlAppend, l as sha256, m as errMessage, n as isNoEntError, o as readCommittedJsonLines, p as causeChain, t as appendCommittedJsonLine, v as defaultRedactor } from "./jsonl-file-BBP9Dz9w.js";
 import { t as assertExecutableAgentProfile } from "./model-policy-C-RGAUW4.js";
 import { a as writeAtomicDurableFile, n as assertNoSymlinkDescendant, o as captureRunWriteContext, r as publishExclusiveDurableFile, s as fenceRunWrite, t as appendDurableFile } from "./durable-file-DstVeHcj.js";
 import { a as withPursuitContext, i as notifyRuntimeHookEvent } from "./runtime-hooks-CsW2pfFk.js";
@@ -2773,25 +2773,22 @@ const causeMessages = {
 */
 const DISPATCH_NOT_ADMITTED_CODE = "DISPATCH_NOT_ADMITTED";
 /**
-* The Sandbox SDK's codes for a box that cannot be provisioned for this profile, sent with HTTP
-* 422 when the failure is deterministic: a profile file mount outside the box's writable roots,
-* refused before any box exists, and a profile-file materialization that would fail the same way
-* again. On Discovery run queens21-h22-capture-root-1-20261019c every child profile mounted
-* `/work/queens21_count.c` on a read-only root filesystem, and 154 attempts across 4 workers were
-* retried as a lost transport. The same codes at another status may be transient and are not
-* read here.
+* The Sandbox SDK's codes for a box that cannot be provisioned for this profile, by the HTTP status
+* each is sent with: a mount outside the box's writable roots and a materialization that would fail
+* the same way again (422), a mounted file changed on both sides since the last mount (409; before
+* Sandbox typed it, a bare 500 read by its text, which magnetar-rust-sandbox-20261031g's managers
+* retried every turn). On Discovery run queens21-h22-capture-root-1-20261019c every child profile
+* mounted `/work/queens21_count.c` on a read-only root filesystem, and 154 attempts across 4
+* workers were retried as a lost transport. The same codes at another status may be transient.
 */
-const PROVISIONING_REFUSAL_CODES = /* @__PURE__ */ new Set(["PROFILE_FILE_MOUNT_OUTSIDE_ROOTS", "PROFILE_FILES_MATERIALIZE_FAILED"]);
+const PROVISIONING_REFUSALS = /* @__PURE__ */ new Map([
+	["PROFILE_FILE_MOUNT_OUTSIDE_ROOTS", 422],
+	["PROFILE_FILES_MATERIALIZE_FAILED", 422],
+	["PROFILE_FILE_CONFLICT", 409]
+]);
+const UNTYPED_FILE_CONFLICT = /Refusing to replace existing profile file: /u;
 /** True for an error that is itself a deterministic provisioning refusal (see above). */
-function isProvisioningRefusal(value) {
-	try {
-		const code = readString(value, "code");
-		const status = readNumber(value, "status") ?? readNumber(value, "statusCode");
-		return code !== void 0 && status === 422 && PROVISIONING_REFUSAL_CODES.has(code);
-	} catch {
-		return false;
-	}
-}
+const isProvisioningRefusal = (value) => refusedAs(PROVISIONING_REFUSALS, value) || value instanceof Error && UNTYPED_FILE_CONFLICT.test(errorProperty(value, "message") ?? "");
 /**
 * Platform refusals the orchestrator answers BEFORE it forwards a dispatch, by machine code and
 * the HTTP status it is sent with. Run 002f69d5: `HUB_CREDENTIAL_REFRESH_FAILED` at 503 left no
@@ -2799,11 +2796,13 @@ function isProvisioningRefusal(value) {
 */
 const PLATFORM_PREDISPATCH_REFUSALS = /* @__PURE__ */ new Map([["HUB_CREDENTIAL_REFRESH_FAILED", 503]]);
 /** True for an error that is itself a named platform refusal of a dispatch (see above). */
-function isPlatformPredispatchRefusal(value) {
+const isPlatformPredispatchRefusal = (value) => refusedAs(PLATFORM_PREDISPATCH_REFUSALS, value);
+/** True when `value` carries one of `refusals`' codes at the status that code is sent with. */
+function refusedAs(refusals, value) {
 	try {
 		const code = readString(value, "code");
 		const status = readNumber(value, "status") ?? readNumber(value, "statusCode");
-		const expected = code === void 0 ? void 0 : PLATFORM_PREDISPATCH_REFUSALS.get(code);
+		const expected = code === void 0 ? void 0 : refusals.get(code);
 		return expected !== void 0 && expected === status;
 	} catch {
 		return false;
@@ -16806,4 +16805,4 @@ async function recoverRetainedChildren(args, children, spawn, next) {
 }
 export { deriveNodeExecutionIdentity as $, parseCodexUsageRecord as $i, persistHarnessTranscript as $n, runtimeFailureCauseSchema as $r, insideCursorNamespace as $t, nestedScopeSeamKey as A, spendFromUsageTotals as Ai, workerTraceEnv as An, knownMaterializationReceipt as Ar, beginScopeRetainedOwnerDrive as At, beginScopeOwnerAttempt as B, extractTransportEventIdentity as Bi, flatOtelSpan as Bn, runtimeOwnedExecutorMaterialization as Br, retainedOwnerWorkspaceRetentionSeamKey as Bt, writeWorkerSteerAcknowledgement as C, hashJson as Ci, nativeCopyDelayMs as Cn, attestRuntimeOwnedPendingExecutor as Cr, environmentReader as Ct, isTraceAnalysisStore as D, meterUsageEvent as Di, openSlotGroup as Dn, finalizeRuntimeOwnedPendingExecutor as Dr, prepareScopeRetainedOwnerTask as Dt, replaySpawnTree as E, createBudgetPool as Ei, createWorkerSlots as En, authoredProfileDigest as Er, consumeScopeRetainedOwnerResult as Et, recoverRetainedInteractiveRun as F, sandboxLeafOutputFromEvents as Fi, buildLoopOtelSpans as Fn, recordRuntimeOwnedProviderDispatchNotStarted as Fr, scopeRetainedOwnerRestorePoint as Ft, scopeOwnerExecutorNodeContext as G, extractLlmCallEvent as Gi, sanitizeKnowledgeReadinessReport as Gn, unknownMaterializationReceipt as Gr, materializeTreeView as Gt, noteScopeOwnerPlannedExecution as H, canonicalSandboxUsageMode as Hi, loopEventToOtelSpan as Hn, runtimeOwnedPendingExecutorMaterialization as Hr, scopeRetainedOwnerJournalRoot as Ht, startRetainedInteractiveRun as I, sandboxOutputMarker as Ii, buildLoopSpanNodes as In, recordRuntimeOwnedProviderIdentityConflict as Ir, noteScopeRetainedOwnerCoordination as It, providerVisibleProfile as J, sameModelId as Ji, captureBoundHarnessTranscript as Jn, isRuntimeFlowBrain as Jr, nestedDriverTreeRoot as Jt, coordinationMcpAlias as K, isSandboxTerminalEvent as Ki, sanitizeRuntimeStreamEvent as Kn, executableAgentProfileSnapshot as Kr, attestNestedDriverTreeOwner as Kt, FileSpawnJournal as L, sandboxProgressEvents as Li, buildRuntimeEventOtelSpans as Ln, recordRuntimeOwnedProviderModel as Lr, scopeRetainedOwnerCheckpointing as Lt, attachWorker as M, createSandboxToolPartState as Mi, createPropagatingTraceEmitter as Mn, providerAttemptEvidence as Mr, scopeRetainedOwnerTurnEnded as Mt, readWorkerInteractiveBinding as N, mapSandboxEvent as Ni, mergeTraceEnv as Nn, recordRuntimeOwnedDriveHarnessProviderEvidence as Nr, assertRetainedOwnerCoordinationRekey as Nt, parseWorkerToolTraceArtifact as O, newUsageTotals as Oi, resolveWorkerSlots as On, inheritRuntimeOwnedExecutorAttestation as Or, scopeRetainedOwnerPriorSpend as Ot, reconnectRetainedInteractiveRun as P, mapSandboxToolEvent as Pi, readTraceContextFromEnv as Pn, recordRuntimeOwnedProviderAttemptStart as Pr, reconcileScopeRetainedOwnerEnvironment as Pt, assertRecursiveReservationPolicy as Q, decodeHarnessUsage as Qi, harnessTranscriptUnavailable as Qn, runtimeFailureCause as Qr, closesCursorSlot as Qt, appendSpawnEvents as R, terminalTextFromSandboxEvent as Ri, createOpenInferenceFileExporter as Rn, runtimeOwnedDriveHarnessProviderEvidence as Rr, bindScopeRetainedOwnerEnvironmentId as Rt, writeWorkerSteer as S, executorFailure as Si, captureProviderWorkspaceSnapshot as Sn, attestRuntimeOwnedExecutor as Sr, scopeRetainedOwnerResourceReader as St, sumSpendFromEvents as T, isCredentialRefusal as Ti, workspaceCaptureReceipt as Tn, authoredAgentIdentity as Tr, abandonScopeRetainedOwnerInvocation as Tt, recordScopeOwnerMaterialization as U, createSandboxTurnEventCollector as Ui, createRuntimeEventCollector as Un, runtimeOwnedScopeOwnerRuntime as Ur, loadSpawnForest as Ut, finalizeScopeOwnerMaterialization as V, assertSandboxServedModel as Vi, generateSpanId as Vn, runtimeOwnedExecutorProviderEvidence as Vr, scopeRetainedOwnerContext as Vt, restoreScopeOwnerAcceptedExecution as W, createSandboxUsageLedger as Wi, createRuntimeStreamEventCollector as Wn, unknownExecutionBindingReceipt as Wr, ownedTreeRootSpawn as Wt, reenteredWorkers as X, sandboxTerminalUsageField as Xi, harnessTranscriptArtifact as Xn, runtimeFlowBrain as Xr, encodeResultBlob as Xt, runtimeGraphMetadataKey as Y, sandboxEventServedBackend as Yi, captureHarnessTranscript as Yn, runtimeFlowAgent as Yr, FileResultBlobStore as Yt, settledToIteration as Z, sumSandboxUsage as Zi, harnessTranscriptFromLines as Zn, reportedFailureCause as Zr, SpawnEventIndex as Zt, supervisorRunDir as _, unavailableSignalOfFailure as _i, destroyInteractiveEnvironment as _n, abortReason as _r, startScopeRecoveries as _t, readRootStream as a, freezeControlRef as aa, isProvisioningRefusal as ai, reconnectRetainedRun as an, DEFAULT_STALL_AFTER_MS as ar, hasRetriableTeardowns as at, workerInboxFileFromEventDir as b, contentAddress as bi, assertProviderWorkspaceRetentionPort as bn, signalAbortError as br, prepareScopeRetainedOwnerSeatSwitch as bt, cancelWorker as c, promptOptionsFromAgentTurnInput as ca, retainedExecutorContext as ci, startRetainedRunInEnvironment as cn, readWorkerProgress as cr, recordScopeOwnerBarrenPause as ct, legacySupervisorRunsRoot as d, UNAVAILABLE_STATUSES as di, offerInteractiveControl as dn, SeatChain as dr, registerNestedTeardownScope as dt, recordValue as ea, runtimeFailureRemediationSchema as ei, verifyWorkspaceMarker as en, readHarnessTranscript as er, freeSlots as et, readWorkerCancelRequests as f, cappedDoublingMs as fi, prepareInteractiveDelegation as fn, SeatChainExhaustedError as fr, releaseHeldEnvironments as ft, safeWorkerFile as g, unavailableSignalInText as gi, verifyObserverRecords as gn, RunCancellationReason as gr, settleManagerWork as gt, readWorkerSteerRequests as h, unavailableResumeAt as hi, observerRecordDigest as hn, subscriptionUsageLimitSignal as hr, retryUnconfirmedTeardowns as ht, nodeStreamFile as i, exactSession as ia, RetainedExecutionPendingError as ii, mintRetainedIdentity as in, retainHarnessTranscript as ir, closeScopeAdmission as it, interactiveAdmissionSeamKey as j, assertValidBudget as ji, workerTraceHeaders as jn, newExecutionAttemptId as jr, scopeRetainedOwnerSettled as jt, workerTraceAnalysisStore as k, spendFromUsageEvents as ki, WORKER_TRACE_PROPAGATION as kn, knownExecutionBindingReceipt as kr, scopeRetainedOwnerResult as kt, claimWorkerSteerDelivery as l, providerMessageText as la, retainedExecutorSeamKey as li, retainedCreateMaterial as ln, isLiveNodeStatus as lr, recordScopeOwnerDriverAttempt as lt, readWorkerSteerAcknowledgement as m, unavailablePauseMs as mi, createFileObserverHooks as mn, seatExecutionProfile as mr, releaseRetainedEnvironments as mt, ROOT_STREAM_FILE as n, assertEventBinding as na, settlementFailureCause as ni, stopRetainedNativeExecution as nn, readBoundHarnessSessions as nr, rollingDispatch as nt, readRootStreamReceipt as o, sameControlCoordinates as oa, isSchemaRejection as oi, recoverRetainedRun as on, createActivityLog as or, meterRuntimeOwnedAccounting as ot, readWorkerCancellation as p, jitteredMs as pi, FileObserverJournal as pn, authoredSeatStages as pr, releaseManagerEnvironment as pt, coordinationProfileToolPrefix as q, notifySandboxEventObserver as qi, HARNESS_TRANSCRIPT_SETTLE_TIMEOUT_MS as qn, executableAgentSpecSnapshot as qr, driverRuntime as qt, createRootStreamSink as r, awaitAbortable$1 as ra, DISPATCH_NOT_ADMITTED_CODE as ri, assertRetainedRunReplayMaterial as rn, resolveHarnessTranscriptCapture as rr, closeRetainedSlots as rt, appendWorkerControlEvent as s, promptFromAgentTurnInput as sa, registerRetainedExecutorPreparation as si, startRetainedRun as sn, describeToolArgs as sr, meterRuntimeOwnedProviderAttempt as st, createScope as t, RetainedRunProviderContractError as ta, runtimeProviderCode as ti, describeRetainedNativeStops as tn, HARNESS_TRANSCRIPT_READ_LIMITS as tr, queueOf as tt, legacySupervisorRunDir as u, UNAVAILABLE_CODES as ui, acceptedInteractiveControl as un, isTerminalNodeStatus as ur, recordScopeOwnerPause as ut, supervisorRunsRoot as v, TRACE_ROOT_SCHEMA as vi, environmentGone as vn, linkAbort as vr, unconfirmedTeardowns as vt, prepareScopeResume as w, credentialCommandExit as wi, openNativeMirror as wn, attestRuntimeOwnedScopeOwner as wr, resolveSpawnResourcePaths as wt, writeWorkerCancellation as x, contentRef as xi, captureProviderLiveWorkspace as xn, attestRuntimeOwnedDeferredExecutor as xr, releaseScopeRetainedOwnerForSeatPause as xt, workerCancellationsDir as y, TRACE_SUMMARY_SCHEMA as yi, DEFAULT_NATIVE_CAPTURE_INTERVAL_MS as yn, runAbortable as yr, waitForScopeChildren as yt, spawnJournalRecordEvents as z, canonicalStreamEventFromSandboxEvent as zi, createOtelExporter as zn, runtimeOwnedExecutorExecutionBinding as zr, bindScopeRetainedOwnerProvider as zt };
 
-//# sourceMappingURL=scope-BKJ_SdfW.js.map
+//# sourceMappingURL=scope-B7AKskjP.js.map