@tangle-network/agent-runtime 3.0.21 → 3.0.23

package/dist/{supervise-9MPkgG8f.js → supervise-CRukjvni.js}

@@ -1,14 +1,14 @@
-import { $n as persistHarnessTranscript, Ai as spendFromUsageTotals, At as beginScopeRetainedOwnerDrive, B as beginScopeOwnerAttempt, Br as runtimeOwnedExecutorMaterialization, Di as meterUsageEvent, Dt as prepareScopeRetainedOwnerTask, Et as consumeScopeRetainedOwnerResult, Ft as scopeRetainedOwnerRestorePoint, G as scopeOwnerExecutorNodeContext, H as noteScopeOwnerPlannedExecution, Hr as runtimeOwnedPendingExecutorMaterialization, Ht as scopeRetainedOwnerJournalRoot, It as noteScopeRetainedOwnerCoordination, J as providerVisibleProfile, Jr as isRuntimeFlowBrain, K as coordinationMcpAlias, Mr as providerAttemptEvidence, Mt as scopeRetainedOwnerTurnEnded, Nr as recordRuntimeOwnedDriveHarnessProviderEvidence, Nt as assertRetainedOwnerCoordinationRekey, O as parseWorkerToolTraceArtifact, Oi as newUsageTotals, Or as inheritRuntimeOwnedExecutorAttestation, Ot as scopeRetainedOwnerPriorSpend, Pt as reconcileScopeRetainedOwnerEnvironment, Q as assertRecursiveReservationPolicy, Rr as runtimeOwnedDriveHarnessProviderEvidence, Rt as bindScopeRetainedOwnerEnvironmentId, Si as executorFailure, St as scopeRetainedOwnerResourceReader, Tr as authoredAgentIdentity, Tt as abandonScopeRetainedOwnerInvocation, U as recordScopeOwnerMaterialization, Ur as runtimeOwnedScopeOwnerRuntime, Vn as generateSpanId, Vr as runtimeOwnedExecutorProviderEvidence, Vt as scopeRetainedOwnerContext, W as restoreScopeOwnerAcceptedExecution, Xr as runtimeFlowBrain, Y as runtimeGraphMetadataKey, Yr as runtimeFlowAgent, a as readRootStream, bi as contentAddress, bt as prepareScopeRetainedOwnerSeatSwitch, ct as recordScopeOwnerBarrenPause, dr as SeatChain, ea as recordValue, er as readHarnessTranscript, fi as cappedDoublingMs, fr as SeatChainExhaustedError, gr as RunCancellationReason, hi as unavailableResumeAt, ii as RetainedExecutionPendingError, ji as assertValidBudget, kn as WORKER_TRACE_PROPAGATION, kt as scopeRetainedOwnerResult, li as retainedExecutorSeamKey, lr as isLiveNodeStatus, lt as recordScopeOwnerDriverAttempt, mi as unavailablePauseMs, mr as seatExecutionProfile, n as ROOT_STREAM_FILE, or as createActivityLog, ot as meterRuntimeOwnedAccounting, pi as jitteredMs, pr as authoredSeatStages, q as coordinationProfileToolPrefix, r as createRootStreamSink, si as registerRetainedExecutorPreparation, st as meterRuntimeOwnedProviderAttempt, ur as isTerminalNodeStatus, ut as recordScopeOwnerPause, vr as linkAbort, wr as attestRuntimeOwnedScopeOwner, xt as releaseScopeRetainedOwnerForSeatPause, yr as runAbortable, zn as createOtelExporter, zr as runtimeOwnedExecutorExecutionBinding, zt as bindScopeRetainedOwnerProvider } from "./scope-CB1FZOkK.js";
+import { $n as persistHarnessTranscript, $r as RetainedExecutionPendingError, At as beginScopeRetainedOwnerDrive, B as beginScopeOwnerAttempt, Ci as newUsageTotals, Cr as inheritRuntimeOwnedExecutorAttestation, Dr as providerAttemptEvidence, Dt as prepareScopeRetainedOwnerTask, Ei as assertValidBudget, Et as consumeScopeRetainedOwnerResult, Fr as runtimeOwnedExecutorMaterialization, Ft as scopeRetainedOwnerRestorePoint, G as scopeOwnerExecutorNodeContext, Gr as runtimeFlowBrain, H as noteScopeOwnerPlannedExecution, Ht as scopeRetainedOwnerJournalRoot, Ir as runtimeOwnedExecutorProviderEvidence, It as noteScopeRetainedOwnerCoordination, J as providerVisibleProfile, K as coordinationMcpAlias, Lr as runtimeOwnedPendingExecutorMaterialization, Mt as scopeRetainedOwnerTurnEnded, Nr as runtimeOwnedDriveHarnessProviderEvidence, Nt as assertRetainedOwnerCoordinationRekey, O as parseWorkerToolTraceArtifact, Or as recordRuntimeOwnedDriveHarnessProviderEvidence, Ot as scopeRetainedOwnerPriorSpend, Pr as runtimeOwnedExecutorExecutionBinding, Pt as reconcileScopeRetainedOwnerEnvironment, Q as assertRecursiveReservationPolicy, Rr as runtimeOwnedScopeOwnerRuntime, Rt as bindScopeRetainedOwnerEnvironmentId, Si as meterUsageEvent, St as scopeRetainedOwnerResourceReader, Ti as spendFromUsageTotals, Tt as abandonScopeRetainedOwnerInvocation, U as recordScopeOwnerMaterialization, Ur as isRuntimeFlowBrain, Vn as generateSpanId, Vt as scopeRetainedOwnerContext, W as restoreScopeOwnerAcceptedExecution, Wr as runtimeFlowAgent, Y as runtimeGraphMetadataKey, Yi as recordValue, _i as executorFailure, a as readRootStream, aa as runAbortable, ai as retainedExecutorSeamKey, br as authoredAgentIdentity, bt as prepareScopeRetainedOwnerSeatSwitch, ci as cappedDoublingMs, ct as recordScopeOwnerBarrenPause, di as unavailableResumeAt, dr as SeatChain, er as readHarnessTranscript, fr as SeatChainExhaustedError, hi as contentAddress, ia as linkAbort, kn as WORKER_TRACE_PROPAGATION, kt as scopeRetainedOwnerResult, li as jitteredMs, lr as isLiveNodeStatus, lt as recordScopeOwnerDriverAttempt, mr as seatExecutionProfile, n as ROOT_STREAM_FILE, na as RunCancellationReason, or as createActivityLog, ot as meterRuntimeOwnedAccounting, pr as authoredSeatStages, q as coordinationProfileToolPrefix, r as createRootStreamSink, ri as registerRetainedExecutorPreparation, st as meterRuntimeOwnedProviderAttempt, ui as unavailablePauseMs, ur as isTerminalNodeStatus, ut as recordScopeOwnerPause, xt as releaseScopeRetainedOwnerForSeatPause, yr as attestRuntimeOwnedScopeOwner, zn as createOtelExporter, zt as bindScopeRetainedOwnerProvider } from "./scope-DdPWlFO4.js";
 import { f as RuntimeRunStateError, i as ConfigError, m as ValidationError } from "./errors-AzSuGI23.js";
 import { $ as isAsyncIterable, Dt as teardownExecutor, G as chargedTokens, Ot as teardownSurfaces, St as armDeadlineTimer, Tt as isDeadlineAbortReason, U as addSpend, Y as errorMessage, at as sleep, bt as DEFAULT_SUCCESSFUL_SHUTDOWN_MS, dt as zeroSpend, gt as withBudgetResources, ht as resourceTelemetry, lt as unmeteredSpend, pt as addResourceSpend, tt as promptCacheTokenClasses, ut as withTimeout } from "./workspace-streams-8ALHaZzx.js";
 import { d as detachedSnapshot, h as errorHttpStatus, m as errMessage } from "./jsonl-file-BBP9Dz9w.js";
-import { $t as renderUnsupported, B as createRouterTranscript, C as createExecutor, Ct as bestComposite, F as codeModeArguments, Gt as assertProfileMaterialization, I as codeModeModelOutput, Jt as defineProfileMaterializationContract, L as createCodeModeTools, Lt as bridgeRuntimeAttachmentsKey, Ot as bridgeAdmissionRefusal, Qt as promptModelProfileMaterialization, Rt as bridgeStopSignalKey, S as captureReusableExecutorConfig, St as admitContinuationPolicy, Tt as createContinuationKeeper, U as resolveAgentEnvironmentProvider, V as routerBrain, X as createInbox, Xt as profileMaterializationAxes$1, Y as INBOX_RECEIPT_KEY, Yt as fullProfileMaterialization, Zt as promptControlProfileMaterialization, _t as gateFactoryOnDeliverable, a as assertRunParking, c as sleepScopeWait, ct as HarnessTurnFailedError, d as runFinalizer, dt as classifyDriverFailure, et as PEER_MAIL_WIRE_KEY, f as runTree, ft as isContentFilterRefusal, g as isDriverSpec, gt as CheckUnavailableError, h as driverExecutorFactory, ht as upstreamUnavailableSignal, i as RunParkedError, kt as bridgeModelRouteRefusal, l as withRunParking, lt as abandonablePending, m as driverChild, mt as undispatchedCredentialExit, n as createSupervisor, nn as unsupportedProfileDimensions, o as bindScopeParkingDrain, p as createRootHandle, pt as summarizeDriverAttempts, qt as controlProfileMaterialization, rn as worktreeCliProfileMaterialization, rt as isPeerMailEnvelope, st as DriverAttemptsExhaustedError, tn as sandboxProfileMaterialization, u as bestDelivered, ut as causedByPartialFailure, w as snapshotExecutorConfig, wt as checkVerdictOf, x as bindReusableExecutorExecutionId, xt as CONTINUATIONS_DIR, z as toolResultText } from "./supervisor-OHBlhBoh.js";
+import { $t as promptModelProfileMaterialization, At as bridgeModelRouteRefusal, B as createRouterTranscript, C as createExecutor, Ct as admitContinuationPolicy, Et as createContinuationKeeper, F as codeModeArguments, I as codeModeModelOutput, Jt as controlProfileMaterialization, Kt as assertProfileMaterialization, L as createCodeModeTools, Qt as promptControlProfileMaterialization, Rt as bridgeRuntimeAttachmentsKey, S as captureReusableExecutorConfig, St as CONTINUATIONS_DIR, Tt as checkVerdictOf, U as resolveAgentEnvironmentProvider, V as routerBrain, X as createInbox, Xt as fullProfileMaterialization, Y as INBOX_RECEIPT_KEY, Yt as defineProfileMaterializationContract, Zt as profileMaterializationAxes$1, _t as CheckUnavailableError, a as assertRunParking, c as sleepScopeWait, ct as HarnessTurnFailedError, d as runFinalizer, dt as classifyDriverFailure, en as renderUnsupported, et as PEER_MAIL_WIRE_KEY, f as runTree, ft as isContentFilterRefusal, g as isDriverSpec, gt as preflightPublicCoordination, h as driverExecutorFactory, ht as upstreamUnavailableSignal, i as RunParkedError, in as worktreeCliProfileMaterialization, kt as bridgeAdmissionRefusal, l as withRunParking, lt as abandonablePending, m as driverChild, mt as undispatchedCredentialExit, n as createSupervisor, nn as sandboxProfileMaterialization, o as bindScopeParkingDrain, p as createRootHandle, pt as summarizeDriverAttempts, rn as unsupportedProfileDimensions, rt as isPeerMailEnvelope, st as DriverAttemptsExhaustedError, u as bestDelivered, ut as causedByPartialFailure, vt as gateFactoryOnDeliverable, w as snapshotExecutorConfig, wt as bestComposite, x as bindReusableExecutorExecutionId, z as toolResultText, zt as bridgeStopSignalKey } from "./supervisor-NnjJHuaL.js";
 import { _ as agentHarness, a as concreteProfileModel, c as profileModelExecutionSettings, l as profileProviderModel, n as assertModelAllowed, o as enforceTokenLimits, r as assertProfileModelsAllowed, s as profileBridgeWireModel, t as assertExecutableAgentProfile, v as harnessRunsAgent } from "./model-policy-C-RGAUW4.js";
+import { n as createStdioToolServer } from "./tool-server-CZWd_Opp.js";
 import { t as composeRuntimeHooks } from "./runtime-hooks-CsW2pfFk.js";
-import { _ as workerAssignmentNamespace, c as writeRunCancellation, d as coordinationEventId, f as externalExecutionId, g as supervisionRunNamespace, h as rootCoordinationOwner, i as readRunCancellation, l as canonicalExecution, m as freezeDetachedProfile, p as freezeDetached, r as readRunCancelRequest, s as watchRunCancellation, t as applyRunCancellation, u as childCoordinationOwner } from "./run-cancellation-Hs7AFuX0.js";
-import { c as createSteerAcknowledger, d as coordinationVerbNames, f as createFileRunContext, l as budgetOverspendText, m as withRunContext, n as createCoordinationToolsForManager, p as createInMemoryRunContext, s as createCancelAcknowledger, t as createCoordinationTools, u as normalizeAnalyzeOnSettle } from "./coordination-manager-DlEk08FJ.js";
+import { _ as workerAssignmentNamespace, c as writeRunCancellation, d as coordinationEventId, f as externalExecutionId, g as supervisionRunNamespace, h as rootCoordinationOwner, i as readRunCancellation, l as canonicalExecution, m as freezeDetachedProfile, p as freezeDetached, r as readRunCancelRequest, s as watchRunCancellation, t as applyRunCancellation, u as childCoordinationOwner } from "./run-cancellation-Gzo6qxlB.js";
+import { c as createSteerAcknowledger, d as coordinationVerbNames, f as createFileRunContext, l as budgetOverspendText, m as withRunContext, n as createCoordinationToolsForManager, p as createInMemoryRunContext, s as createCancelAcknowledger, t as createCoordinationTools, u as normalizeAnalyzeOnSettle } from "./coordination-manager-2WKCgKK1.js";
 import { o as safeJsonText } from "./coordination-map-routing-BllzcZov.js";
-import { n as createStdioToolServer, t as PROTOCOL_VERSION } from "./tool-server-CZWd_Opp.js";
 import { a as graphRegistry, c as loadGraph } from "./graph-registry-D6y6zffC.js";
 import { ATTR, agentIdentityAttributes } from "@tangle-network/agent-trace-contract";
 import { ProxySecretScopeSchema, ProxySecretsSchema, agentProfileSchema, canonicalAgentProfileDigest, canonicalCandidateDigest, canonicalCandidateJson, mergeProxySecretBindings, validateAgentProfileSecurity } from "@tangle-network/agent-interface";
@@ -331,10 +331,10 @@ function parentSpan(t, parentId) {
 	};
 }
 function openNode(t, event) {
-	const p = record$1(event.payload);
+	const p = record(event.payload);
 	const childId = str(p.childId);
 	if (!childId) return;
-	const identity = agentIdentityAttributes(record$1(p.agent));
+	const identity = agentIdentityAttributes(record(p.agent));
 	t.identityOf.set(childId, identity);
 	const attrs = spawnAttributes(t.base, event, identity);
 	const parent = parentSpan(t, event.parentId);
@@ -350,7 +350,7 @@ function openNode(t, event) {
 	});
 }
 function settleNode(t, event) {
-	const p = record$1(event.payload);
+	const p = record(event.payload);
 	const childId = str(p.childId);
 	if (!childId) return void 0;
 	const node = t.open.get(childId);
@@ -383,7 +383,7 @@ function turnSpan(t, event) {
 		"tangle.supervise.node.kind": "inference"
 	};
 	if (parentId) attrs["tangle.supervise.node.id"] = parentId;
-	const p = record$1(event.payload);
+	const p = record(event.payload);
 	assignTurnDetail(attrs, p);
 	const spend = assignSpend(attrs, p.spend);
 	return otelSpan(t.traceId, {
@@ -502,7 +502,7 @@ function createSupervisorSpanRecorder(opts) {
 }
 /** The attributes of a node span at `agent.spawn`, before its parent span is known. */
 function spawnAttributes(base, event, identity) {
-	const p = record$1(event.payload);
+	const p = record(event.payload);
 	const label = str(p.label) ?? "node";
 	const runtime = str(p.runtime);
 	const attrs = {
@@ -531,7 +531,7 @@ function spawnAttributes(base, event, identity) {
 }
 /** A node span's attributes at `agent.child`: the spawn-time ones plus how it settled. */
 function settledAttributes(opened, event) {
-	const p = record$1(event.payload);
+	const p = record(event.payload);
 	const status = str(p.status);
 	const attrs = {
 		...opened,
@@ -547,7 +547,7 @@ function settledAttributes(opened, event) {
 		if (reason) attrs["error.message"] = truncate(reason);
 		if (typeof p.infra === "boolean") attrs["tangle.supervise.node.infra"] = p.infra;
 	}
-	const wokeBy = str(record$1(p.wait).settled);
+	const wokeBy = str(record(p.wait).settled);
 	if (wokeBy) attrs["tangle.supervise.wait.settled"] = wokeBy;
 	assignSpend(attrs, p.spent);
 	return attrs;
@@ -655,7 +655,7 @@ function normalizeTraceId(traceId, runId, namespace) {
 	const source = traceId ?? (namespace === void 0 ? runId : `${namespace}\u0000${runId}`);
 	return contentAddress(source).slice(7, 39);
 }
-function record$1(value) {
+function record(value) {
 	return isRecord(value) ? value : {};
 }
 function str(value) {
@@ -4250,96 +4250,6 @@ function bindServedTools(opts, coord, fenceMs) {
 		background: () => nodeTools.background() + fencedVerbs.background()
 	};
 }
-// src/runtime/supervise/coordination-preflight.ts
-const MAX_RESPONSE_BYTES = 1048576;
-var CoordinationPreflightError = class extends ConfigError {
-	constructor(reason) {
-		super(`coordination public endpoint preflight failed: ${reason}`);
-	}
-};
-function record(value) {
-	return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-/** Check the operator's route before it becomes a provider attachment. This does not prove cloud egress. */
-async function preflightPublicCoordination(input) {
-	const deadline = new AbortController();
-	const linked = linkAbort(input.signal, deadline.signal);
-	const timer = setTimeout(() => deadline.abort(), Math.min(input.requestTimeoutMs, 1e4));
-	timer.unref();
-	const rpc = async (method, params) => {
-		const response = await fetch(input.url, {
-			method: "POST",
-			headers: {
-				...input.headers,
-				"content-type": "application/json",
-				accept: "application/json"
-			},
-			body: JSON.stringify({
-				jsonrpc: "2.0",
-				id: method,
-				method,
-				...params ? { params } : {}
-			}),
-			redirect: "manual",
-			signal: linked.signal
-		});
-		if (response.status !== 200) {
-			response.body?.cancel().catch(() => void 0);
-			throw new CoordinationPreflightError(`HTTP ${response.status}`);
-		}
-		const reader = response.body?.getReader();
-		if (!reader) throw new CoordinationPreflightError("invalid MCP response");
-		let size = 0;
-		const chunks = [];
-		try {
-			for (;;) {
-				const part = await reader.read();
-				if (part.done) break;
-				size += part.value.byteLength;
-				if (size > MAX_RESPONSE_BYTES) {
-					reader.cancel().catch(() => void 0);
-					throw new CoordinationPreflightError("response too large");
-				}
-				chunks.push(part.value);
-			}
-		} finally {
-			reader.releaseLock();
-		}
-		let body;
-		try {
-			body = JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(Buffer.concat(chunks)));
-		} catch {
-			throw new CoordinationPreflightError("invalid MCP response");
-		}
-		if (!record(body) || body.jsonrpc !== "2.0" || body.id !== method || body.error || !record(body.result)) throw new CoordinationPreflightError("invalid MCP response");
-		return body.result;
-	};
-	try {
-		await runAbortable(async () => {
-			const initialized = await rpc("initialize", {
-				protocolVersion: PROTOCOL_VERSION,
-				capabilities: {},
-				clientInfo: {
-					name: "agent-runtime-coordination-preflight",
-					version: "1"
-				}
-			});
-			if (initialized.protocolVersion !== "2024-11-05" || !record(initialized.serverInfo) || initialized.serverInfo.name !== "coordination" || !record(initialized.capabilities) || !record(initialized.capabilities.tools)) throw new CoordinationPreflightError("invalid MCP initialization");
-			const listing = await rpc("tools/list");
-			if (!Array.isArray(listing.tools) || listing.tools.some((tool) => !record(tool) || typeof tool.name !== "string")) throw new CoordinationPreflightError("invalid MCP tool list");
-			const names = listing.tools.map((tool) => tool.name).sort();
-			if (JSON.stringify(names) !== JSON.stringify([...input.toolNames].sort())) throw new CoordinationPreflightError("coordination tool grants differ");
-		}, linked.signal, "coordination public endpoint preflight cancelled");
-	} catch (error) {
-		if (input.signal.aborted) throw new CoordinationPreflightError("cancelled");
-		if (deadline.signal.aborted) throw new CoordinationPreflightError("timed out");
-		if (error instanceof CoordinationPreflightError) throw error;
-		throw new CoordinationPreflightError("transport unavailable");
-	} finally {
-		clearTimeout(timer);
-		linked.release();
-	}
-}
 // src/runtime/supervise/coordination-mcp.ts
 /** Serve Runtime coordination as bounded HTTP MCP over one live scope. @experimental */
 /** Recognizable loopback spellings; other hostnames require authenticated remote transport. */
@@ -4375,7 +4285,7 @@ function coordinationResponseFenceMs(requestTimeoutMs) {
 async function serveCoordinationMcp(opts) {
 	return (await serveCoordinationMcpForManager(opts)).handle;
 }
-/** Bind the advertised address, credential audience and paths, then prove public reachability. */
+/** Bind the advertised address, credential audience and paths, and say how to prove the route. */
 async function bindCoordinationAddress(ctx, port, addressSignal) {
 	const { opts, host, identity, state } = ctx;
 	const localUrl = `http://${host.includes(":") && !host.startsWith("[") ? `[${host}]` : host}:${port}/mcp`;
@@ -4401,14 +4311,17 @@ async function bindCoordinationAddress(ctx, port, addressSignal) {
 		state.controlPaths.add(`${path.replace(/\/$/, "")}/control`);
 		state.mailPaths.add(`${path.replace(/\/$/, "")}/mail`);
 	}
-	if (configured !== void 0) await preflightPublicCoordination({
+	const prove = () => preflightPublicCoordination({
 		url,
 		headers: ctx.credentials.headers,
 		signal: opts.scope.signal,
 		requestTimeoutMs: ctx.requestTimeoutMs,
 		toolNames: opts.toolNames
 	});
-	return url;
+	return {
+		url,
+		prove: configured === void 0 ? async () => {} : prove
+	};
 }
 /** Runtime-only binding: operator controls stay off the public MCP handle and tool grants. */
 async function serveCoordinationMcpForManager(opts, lifetime) {
@@ -4481,9 +4394,10 @@ async function serveCoordinationMcpForManager(opts, lifetime) {
 		opts.scope.signal.removeEventListener("abort", abortAddress);
 		if (!addressLifetime.signal.aborted) addressLifetime.abort(/* @__PURE__ */ new Error("coordination listener closed"));
 	};
-	let url;
+	let bound;
 	try {
-		url = await bindCoordinationAddress(ctx, port, addressLifetime.signal);
+		bound = await bindCoordinationAddress(ctx, port, addressLifetime.signal);
+		if (lifetime === void 0) await bound.prove();
 	} catch (error) {
 		releaseAddress();
 		state.closed = true;
@@ -4493,6 +4407,12 @@ async function serveCoordinationMcpForManager(opts, lifetime) {
 		});
 		throw error;
 	}
+	const { url } = bound;
+	let proven = lifetime === void 0;
+	const reachable = async () => {
+		if (!proven) await bound.prove();
+		proven = true;
+	};
 	let stopCredentialBinding;
 	let refreshBoundCredential;
 	const bindCredential = async (install) => {
@@ -4593,7 +4513,8 @@ async function serveCoordinationMcpForManager(opts, lifetime) {
 	}
 	return {
 		handle,
-		controls: coord
+		controls: coord,
+		reachable
 	};
 }
 function coordinationBindingHost({ hostname }) {
@@ -4795,14 +4716,16 @@ async function openManagerSession(config, task, scope) {
 		ledger: void 0,
 		keeper: void 0
 	};
-	const { handle: mcp, controls } = await serveManagerCoordination(config, state, context, priorCoordination, nodeTools, progressStopObserver(deps, state, nodeObserver));
+	const served = await serveManagerCoordination(config, state, context, priorCoordination, nodeTools, progressStopObserver(deps, state, nodeObserver));
+	const { handle: mcp, controls } = served;
 	state.ledger = mcp;
 	config.live.coordinator = mcp;
 	config.live.inbox = managerInboxRoute(config, state, controls);
 	return {
 		state,
 		mcp,
-		controls
+		controls,
+		reachable: served.reachable
 	};
 }
 /**
@@ -5979,6 +5902,7 @@ async function driveManagerTurns(inputs) {
 			drive: async (attempt, reentry) => {
 				let handedOff = false;
 				try {
+					await session.reachable();
 					await driveManagerTurn(loop, attempt, reentry);
 				} catch (error) {
 					handedOff = error instanceof RunParkedError && error.runId === scope.view.root;
@@ -9501,4 +9425,4 @@ function superviseWithContext(profile, task, opts, brain) {
 }
 export { analyzesFindingsReportPrompt as A, anyOf as B, flowRootProfile as C, defaultEdgeTraversalCap as D, validateFlowGraph as E, formatPromptHandle as F, bestSoFar as G, plateau as H, kernelPromptRegistry as I, createSupervisorSpanRecorder as J, plateauLength as K, naiveContinuationPrompt as L, delegatesWorkerBriefPrompt as M, dumbContinuationFailPrompt as N, graphRootProfile as O, dumbContinuationPassPrompt as P, promptHandle as R, createFlowRun as S, routeFlowOf as T, anytimeReport as U, noProgressFor as V, areaUnderCurve as W, coordinationControlToolNames as _, superviseRootProfile as a, createGraphOverlay as b, retryPreSpawnRefusals as c, supervisorAgent as d, supervisorAgentWithTestBrain as f, serveCoordinationMcp as g, composeReentryTask as h, profileGuidanceComposer as i, createPromptRegistry as j, validateGraphTopology as k, withWorkerSpawnRetry as l, UNPROVEN_CONTINUITY as m, superviseFleetCapabilities as n, isPreSpawnExecutorFailure as o, runToolSpans as p, renderAnytimeTable as q, superviseWithTestBrain as r, resolveWorkerSpawnRetry as s, supervise as t, workerFromBackend as u, driverAgent as v, journaledGateDecider as w, GraphRouteError as x, runBrainLoop as y, allWorkersStalled as z };
 
-//# sourceMappingURL=supervise-9MPkgG8f.js.map
+//# sourceMappingURL=supervise-CRukjvni.js.map