@tangle-network/agent-runtime 3.0.21 → 3.0.23

package/dist/{supervisor-OHBlhBoh.js → supervisor-NnjJHuaL.js}

@@ -1,11 +1,12 @@
-import { $i as parseCodexUsageRecord, A as nestedScopeSeamKey, An as workerTraceEnv, Ar as knownMaterializationReceipt, Bi as extractTransportEventIdentity, Br as runtimeOwnedExecutorMaterialization, Bt as retainedOwnerWorkspaceRetentionSeamKey, Ci as hashJson, Cn as nativeCopyDelayMs, Cr as attestRuntimeOwnedPendingExecutor, Dr as finalizeRuntimeOwnedPendingExecutor, Ei as createBudgetPool, Fi as sandboxLeafOutputFromEvents, Fr as recordRuntimeOwnedProviderDispatchNotStarted, Gr as unknownMaterializationReceipt, Hi as canonicalSandboxUsageMode, Ii as sandboxOutputMarker, Ir as recordRuntimeOwnedProviderIdentityConflict, Ji as sameModelId, Jt as nestedDriverTreeRoot, Ki as isSandboxTerminalEvent, Kr as executableAgentProfileSnapshot, Kt as attestNestedDriverTreeOwner, Li as sandboxProgressEvents, Lr as recordRuntimeOwnedProviderModel, Lt as scopeRetainedOwnerCheckpointing, Mi as createSandboxToolPartState, Nn as mergeTraceEnv, On as resolveWorkerSlots, Or as inheritRuntimeOwnedExecutorAttestation, Pr as recordRuntimeOwnedProviderAttemptStart, Q as assertRecursiveReservationPolicy, Qn as harnessTranscriptUnavailable, Qr as runtimeFailureCause, Qt as closesCursorSlot, R as appendSpawnEvents, Sn as captureProviderWorkspaceSnapshot, Sr as attestRuntimeOwnedExecutor, T as sumSpendFromEvents, Ti as isCredentialRefusal, Tn as workspaceCaptureReceipt, Ui as createSandboxTurnEventCollector, Ur as runtimeOwnedScopeOwnerRuntime, Ut as loadSpawnForest, V as finalizeScopeOwnerMaterialization, Vi as assertSandboxServedModel, Wi as createSandboxUsageLedger, Wr as unknownExecutionBindingReceipt, Wt as ownedTreeRootSpawn, X as reenteredWorkers, Xi as sandboxTerminalUsageField, Xt as encodeResultBlob, Yi as sandboxEventServedBackend, Yn as captureHarnessTranscript, Zn as harnessTranscriptFromLines, Zr as reportedFailureCause, Zt as SpawnEventIndex, _i as unavailableSignalOfFailure, _r as abortReason, _t as startScopeRecoveries, aa as freezeControlRef, ai as isProvisioningRefusal, an as reconnectRetainedRun, at as hasRetriableTeardowns, bi as contentAddress, bn as assertProviderWorkspaceRetentionPort, ca as promptOptionsFromAgentTurnInput, ci as retainedExecutorContext, di as UNAVAILABLE_STATUSES, dt as registerNestedTeardownScope, ea as recordValue, ei as runtimeFailureRemediationSchema, en as verifyWorkspaceMarker, ft as releaseHeldEnvironments, gi as unavailableSignalInText, gr as RunCancellationReason, gt as settleManagerWork, hr as subscriptionUsageLimitSignal, ht as retryUnconfirmedTeardowns, ia as exactSession, ii as RetainedExecutionPendingError, in as mintRetainedIdentity, ir as retainHarnessTranscript, it as closeScopeAdmission, jn as workerTraceHeaders, jr as newExecutionAttemptId, jt as scopeRetainedOwnerSettled, kn as WORKER_TRACE_PROPAGATION, kr as knownExecutionBindingReceipt, li as retainedExecutorSeamKey, lr as isLiveNodeStatus, mi as unavailablePauseMs, mt as releaseRetainedEnvironments, na as assertEventBinding, nn as stopRetainedNativeExecution, oa as sameControlCoordinates, oi as isSchemaRejection, on as recoverRetainedRun, or as createActivityLog, pt as releaseManagerEnvironment, qi as notifySandboxEventObserver, qn as HARNESS_TRANSCRIPT_SETTLE_TIMEOUT_MS, qr as executableAgentSpecSnapshot, qt as driverRuntime, ra as awaitAbortable, ri as DISPATCH_NOT_ADMITTED_CODE, rn as assertRetainedRunReplayMaterial, rt as closeRetainedSlots, sn as startRetainedRun, sr as describeToolArgs, t as createScope, ta as RetainedRunProviderContractError, ti as runtimeProviderCode, tn as describeRetainedNativeStops, ui as UNAVAILABLE_CODES, vn as environmentGone, vr as linkAbort, vt as unconfirmedTeardowns, w as prepareScopeResume, wi as credentialCommandExit, wn as openNativeMirror, xi as contentRef, xn as captureProviderLiveWorkspace, xr as attestRuntimeOwnedDeferredExecutor, yr as runAbortable, yt as waitForScopeChildren, zr as runtimeOwnedExecutorExecutionBinding } from "./scope-CB1FZOkK.js";
-import { f as RuntimeRunStateError, m as ValidationError$1, r as BackendTransportError, t as AgentEvalError } from "./errors-AzSuGI23.js";
+import { $i as exactSession, $r as RetainedExecutionPendingError, A as nestedScopeSeamKey, Ai as sandboxLeafOutputFromEvents, An as workerTraceEnv, Ar as recordRuntimeOwnedProviderDispatchNotStarted, Br as unknownMaterializationReceipt, Bt as retainedOwnerWorkspaceRetentionSeamKey, Cn as nativeCopyDelayMs, Cr as inheritRuntimeOwnedExecutorAttestation, Di as createSandboxToolPartState, Er as newExecutionAttemptId, Fi as extractTransportEventIdentity, Fr as runtimeOwnedExecutorMaterialization, Gi as sandboxTerminalUsageField, Hi as notifySandboxEventObserver, Hr as executableAgentSpecSnapshot, Ii as assertSandboxServedModel, Ji as parseCodexUsageRecord, Jt as nestedDriverTreeRoot, Kr as reportedFailureCause, Kt as attestNestedDriverTreeOwner, Li as canonicalSandboxUsageMode, Lt as scopeRetainedOwnerCheckpointing, Mi as sandboxProgressEvents, Mr as recordRuntimeOwnedProviderModel, Nn as mergeTraceEnv, On as resolveWorkerSlots, Pr as runtimeOwnedExecutorExecutionBinding, Q as assertRecursiveReservationPolicy, Qi as awaitAbortable, Qn as harnessTranscriptUnavailable, Qr as DISPATCH_NOT_ADMITTED_CODE, Qt as closesCursorSlot, R as appendSpawnEvents, Ri as createSandboxTurnEventCollector, Rr as runtimeOwnedScopeOwnerRuntime, Sn as captureProviderWorkspaceSnapshot, Sr as finalizeRuntimeOwnedPendingExecutor, T as sumSpendFromEvents, Tn as workspaceCaptureReceipt, Tr as knownMaterializationReceipt, Ui as sameModelId, Ut as loadSpawnForest, V as finalizeScopeOwnerMaterialization, Vi as isSandboxTerminalEvent, Vr as executableAgentProfileSnapshot, Wi as sandboxEventServedBackend, Wt as ownedTreeRootSpawn, X as reenteredWorkers, Xi as RetainedRunProviderContractError, Xr as runtimeProviderCode, Xt as encodeResultBlob, Yi as recordValue, Yn as captureHarnessTranscript, Yr as runtimeFailureRemediationSchema, Zi as assertEventBinding, Zn as harnessTranscriptFromLines, Zt as SpawnEventIndex, _r as attestRuntimeOwnedExecutor, _t as startScopeRecoveries, aa as runAbortable, ai as retainedExecutorSeamKey, an as reconnectRetainedRun, at as hasRetriableTeardowns, bi as isCredentialRefusal, bn as assertProviderWorkspaceRetentionPort, ca as promptOptionsFromAgentTurnInput, dt as registerNestedTeardownScope, ea as freezeControlRef, ei as TRANSPORT_ERROR_CODES, en as verifyWorkspaceMarker, fi as unavailableSignalOfFailure, ft as releaseHeldEnvironments, gi as contentRef, gr as attestRuntimeOwnedDeferredExecutor, gt as settleManagerWork, hi as contentAddress, hr as subscriptionUsageLimitSignal, ht as retryUnconfirmedTeardowns, ia as linkAbort, ii as retainedExecutorContext, in as mintRetainedIdentity, ir as retainHarnessTranscript, it as closeScopeAdmission, ji as sandboxOutputMarker, jn as workerTraceHeaders, jr as recordRuntimeOwnedProviderIdentityConflict, jt as scopeRetainedOwnerSettled, kn as WORKER_TRACE_PROPAGATION, kr as recordRuntimeOwnedProviderAttemptStart, lr as isLiveNodeStatus, mt as releaseRetainedEnvironments, na as RunCancellationReason, ni as isSchemaRejection, nn as stopRetainedNativeExecution, oi as UNAVAILABLE_CODES, on as recoverRetainedRun, or as createActivityLog, pt as releaseManagerEnvironment, qn as HARNESS_TRANSCRIPT_SETTLE_TIMEOUT_MS, qr as runtimeFailureCause, qt as driverRuntime, ra as abortReason, rn as assertRetainedRunReplayMaterial, rt as closeRetainedSlots, si as UNAVAILABLE_STATUSES, sn as startRetainedRun, sr as describeToolArgs, t as createScope, ta as sameControlCoordinates, ti as isProvisioningRefusal, tn as describeRetainedNativeStops, ui as unavailablePauseMs, vi as hashJson, vn as environmentGone, vr as attestRuntimeOwnedPendingExecutor, vt as unconfirmedTeardowns, w as prepareScopeResume, wn as openNativeMirror, wr as knownExecutionBindingReceipt, xi as createBudgetPool, xn as captureProviderLiveWorkspace, yi as credentialCommandExit, yt as waitForScopeChildren, zi as createSandboxUsageLedger, zr as unknownExecutionBindingReceipt } from "./scope-DdPWlFO4.js";
+import { f as RuntimeRunStateError, i as ConfigError, m as ValidationError$1, r as BackendTransportError, t as AgentEvalError } from "./errors-AzSuGI23.js";
 import { $ as isAsyncIterable, J as deleteBoxSafe, Ot as teardownSurfaces, Q as isAbortError, St as armDeadlineTimer, Tt as isDeadlineAbortReason, U as addSpend, V as hasControlCharacter, W as addTokenUsage, Y as errorMessage, _t as ACCEPTED_RESULT_GRACE_MS, at as sleep, ct as throwIfAborted, dt as zeroSpend, et as mapWithConcurrency, ft as zeroTokenUsage, gt as withBudgetResources, it as roundBoxMinutes, lt as unmeteredSpend, nt as randomSuffix, ot as stringifySafe, pt as addResourceSpend, q as cloneTokenUsage, rt as randomUuid, st as throwAbort, tt as promptCacheTokenClasses, ut as withTimeout, xt as ROOT_DEADLINE_REASON } from "./workspace-streams-8ALHaZzx.js";
 import { t as runTaskQueue } from "./task-queue-DbpZAp6C.js";
 import { _ as errorText, d as detachedSnapshot, g as errorProperty, h as errorHttpStatus, l as sha256, m as errMessage, p as causeChain, v as defaultRedactor } from "./jsonl-file-BBP9Dz9w.js";
 import { _ as agentHarness, a as concreteProfileModel, c as profileModelExecutionSettings, d as assertRouterAutoDeclaration, f as assertRouterAutoResponse, g as observedModelMatchesDeclared, h as observedModelHasSnapshot, l as profileProviderModel, m as mergeObservedModelIdentity, o as enforceTokenLimits, s as profileBridgeWireModel, t as assertExecutableAgentProfile, u as resolveRouterRetryPolicy } from "./model-policy-C-RGAUW4.js";
 import { r as nativeSystemPrompt, t as assertSandboxProfileCompatibility } from "./sandbox-profile-compat-oFGWESLn.js";
 import { a as writeAtomicDurableFile, s as fenceRunWrite } from "./durable-file-DstVeHcj.js";
+import { t as PROTOCOL_VERSION } from "./tool-server-CZWd_Opp.js";
 import { i as notifyRuntimeHookEvent } from "./runtime-hooks-CsW2pfFk.js";
 import { AGENT_PROFILE_MATERIALIZATION_AXES, AgentExactRunControlRefSchema, AgentRunCancellationRequestSchema, AgentTurnInputSchema, REASONING_EFFORTS, agentProfileSchema, canonicalAgentProfileDigest, canonicalCandidateDigest, canonicalWorkspaceCwd, harnessTypeSchema, mergeProxySecretBindings, nativeReasoningControl, profileMaterializationAxes, profileMaterializationAxes as profileMaterializationAxes$1, renderInputPartsAsText, sha256DigestSchema } from "@tangle-network/agent-interface";
 import { createAgentRunOutcomeTracker } from "@tangle-network/sandbox/runtime";
@@ -5473,6 +5474,109 @@ function verdictFromJudgeScore(score, threshold) {
 		...review === "" ? {} : { review }
 	});
 }
+// src/runtime/supervise/coordination-preflight.ts
+const MAX_RESPONSE_BYTES = 1048576;
+var CoordinationPreflightError = class extends ConfigError {
+	constructor(reason) {
+		super(`coordination public endpoint preflight failed: ${reason}`);
+	}
+};
+/**
+* The route timed out, lost its socket, or answered 408, 429 or 5xx: it cannot serve now, so a
+* manager waits for it as for any unavailable upstream. magnetar-rust-sandbox-20261101b's :s2:s2
+* and :s1:s1 settled down on `timed out` while drew-gtr-pro, which serves the route, ran at load 25.
+*/
+var CoordinationUnreachableError = class extends Error {
+	name = "CoordinationUnreachableError";
+};
+const unreachable = (reason) => new CoordinationUnreachableError(`coordination public endpoint preflight failed: ${reason}`);
+function record(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+/** Check the operator's route before it becomes a provider attachment. This does not prove cloud egress. */
+async function preflightPublicCoordination(input) {
+	const deadline = new AbortController();
+	const linked = linkAbort(input.signal, deadline.signal);
+	const timer = setTimeout(() => deadline.abort(), input.requestTimeoutMs);
+	timer.unref();
+	const rpc = async (method, params) => {
+		const response = await fetch(input.url, {
+			method: "POST",
+			headers: {
+				...input.headers,
+				"content-type": "application/json",
+				accept: "application/json"
+			},
+			body: JSON.stringify({
+				jsonrpc: "2.0",
+				id: method,
+				method,
+				...params ? { params } : {}
+			}),
+			redirect: "manual",
+			signal: linked.signal
+		});
+		if (response.status !== 200) {
+			response.body?.cancel().catch(() => void 0);
+			const { status } = response;
+			if (status === 408 || status === 429 || status >= 500) throw unreachable(`HTTP ${status}`);
+			throw new CoordinationPreflightError(`HTTP ${status}`);
+		}
+		const reader = response.body?.getReader();
+		if (!reader) throw new CoordinationPreflightError("invalid MCP response");
+		let size = 0;
+		const chunks = [];
+		try {
+			for (;;) {
+				const part = await reader.read();
+				if (part.done) break;
+				size += part.value.byteLength;
+				if (size > MAX_RESPONSE_BYTES) {
+					reader.cancel().catch(() => void 0);
+					throw new CoordinationPreflightError("response too large");
+				}
+				chunks.push(part.value);
+			}
+		} finally {
+			reader.releaseLock();
+		}
+		let body;
+		try {
+			body = JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(Buffer.concat(chunks)));
+		} catch {
+			throw new CoordinationPreflightError("invalid MCP response");
+		}
+		if (!record(body) || body.jsonrpc !== "2.0" || body.id !== method || body.error || !record(body.result)) throw new CoordinationPreflightError("invalid MCP response");
+		return body.result;
+	};
+	try {
+		await runAbortable(async () => {
+			const initialized = await rpc("initialize", {
+				protocolVersion: PROTOCOL_VERSION,
+				capabilities: {},
+				clientInfo: {
+					name: "agent-runtime-coordination-preflight",
+					version: "1"
+				}
+			});
+			if (initialized.protocolVersion !== "2024-11-05" || !record(initialized.serverInfo) || initialized.serverInfo.name !== "coordination" || !record(initialized.capabilities) || !record(initialized.capabilities.tools)) throw new CoordinationPreflightError("invalid MCP initialization");
+			const listing = await rpc("tools/list");
+			if (!Array.isArray(listing.tools) || listing.tools.some((tool) => !record(tool) || typeof tool.name !== "string")) throw new CoordinationPreflightError("invalid MCP tool list");
+			const names = listing.tools.map((tool) => tool.name).sort();
+			if (JSON.stringify(names) !== JSON.stringify([...input.toolNames].sort())) throw new CoordinationPreflightError("coordination tool grants differ");
+		}, linked.signal, "coordination public endpoint preflight cancelled");
+	} catch (error) {
+		if (input.signal.aborted) throw new CoordinationPreflightError("cancelled");
+		if (deadline.signal.aborted) throw unreachable("timed out");
+		if (error instanceof CoordinationPreflightError) throw error;
+		if (error instanceof CoordinationUnreachableError) throw error;
+		if (causeChain(error).some((cause) => TRANSPORT_ERROR_CODES.has(String(Object(cause).code)))) throw unreachable("transport unavailable");
+		throw new CoordinationPreflightError("transport unavailable");
+	} finally {
+		clearTimeout(timer);
+		linked.release();
+	}
+}
 // src/runtime/supervise/driver-attempt-evidence.ts
 /**
 * True when `error` or one of its causes is Sandbox's `PartialFailureError`. Read by name: the
@@ -5562,8 +5666,9 @@ function isDispatchNotAdmitted(error) {
 * The code or status that marks `error` as an upstream capacity refusal, or `undefined`.
 *
 * A structured field is read first: a turn outcome's `errorCode`, a transport error's
-* `upstreamCode` and `status`, a provider SDK error's `status`. The failure text is read only when
-* no structured field decided, because a harness CLI reports the router's refusal as text.
+* `upstreamCode` and `status`, a provider SDK error's `code` and `status`. The failure text is read
+* only as {@link unavailableSignalOfFailure} says, because a harness CLI reports the router's
+* refusal as text and Sandbox's held-room refusal shares its code with a shape that never fits.
 */
 function upstreamUnavailableSignal(error) {
 	if (undispatchedCredentialExit(error) !== void 0) return "credential-unavailable";
@@ -5573,41 +5678,27 @@ function upstreamUnavailableSignal(error) {
 	if (isCredentialRefusal(error)) return void 0;
 	if (isProviderSchemaRejection(error)) return void 0;
 	if (error instanceof CheckUnavailableError) return "check-unavailable";
-	if (error instanceof HarnessTurnFailedError) {
-		const usageLimit = subscriptionUsageLimitSignal({
-			error: error.message,
-			...error.errorCode === void 0 ? {} : { errorCode: error.errorCode }
-		});
-		if (usageLimit !== void 0) return usageLimit;
-		return unavailableSignalOfFailure({
-			error: error.message,
-			...error.errorCode === void 0 ? {} : { errorCode: error.errorCode },
-			...error.statusCode === void 0 ? {} : { statusCode: error.statusCode }
-		});
-	}
-	if (error instanceof BackendTransportError) {
-		const code = error.upstreamCode?.toLowerCase();
-		if (code !== void 0 && UNAVAILABLE_CODES.has(code)) return code;
-		if (error.status !== void 0) return UNAVAILABLE_STATUSES.has(error.status) ? `http-${error.status}` : void 0;
-		return unavailableSignalInText(errorProperty(error, "message") ?? "");
-	}
-	if (error instanceof AgentEvalError) return void 0;
-	const code = capacityCode(error);
-	if (code !== void 0) return code;
-	const status = errorHttpStatus(error);
-	if (status !== void 0) return UNAVAILABLE_STATUSES.has(status) ? `http-${status}` : void 0;
-	return unavailableSignalInText(errorProperty(error, "message") ?? "");
+	if (error instanceof CoordinationUnreachableError) return "coordination-unreachable";
+	const transport = error instanceof BackendTransportError;
+	if (error instanceof AgentEvalError && !transport) return void 0;
+	const harness = error instanceof HarnessTurnFailedError;
+	const failure = {
+		error: errorProperty(error, "message") ?? "",
+		errorCode: harness ? error.errorCode : transport ? error.upstreamCode : ownCode(error),
+		statusCode: errorHttpStatus(error)
+	};
+	return (harness ? subscriptionUsageLimitSignal(failure) : void 0) ?? unavailableSignalOfFailure(failure);
 }
 /**
-* The upstream capacity code an error carries as its own `code` field, or `undefined`. A provider
-* SDK names a capacity refusal with the router's code when no HTTP response exists to carry a
-* status: agent-provider-tangle's `TangleCredentialCapacityError` (`provider_quota_exhausted`,
+* An error's own `code` field, read without trusting its getter. A provider SDK names a capacity
+* refusal with the router's code when no HTTP response exists to carry a status:
+* agent-provider-tangle's `TangleCredentialCapacityError` (`provider_quota_exhausted`,
 * `upstream_unavailable`) when the subscription account owner has no account with room.
 */
-function capacityCode(error) {
+function ownCode(error) {
 	try {
 		const code = Reflect.get(error, "code");
-		return typeof code === "string" && UNAVAILABLE_CODES.has(code.toLowerCase()) ? code.toLowerCase() : void 0;
+		return typeof code === "string" ? code : void 0;
 	} catch {
 		return;
 	}
@@ -5679,7 +5770,7 @@ function retainedAdmissionCause(error) {
 			if (errorProperty(value, "name") === "RetainedRunProviderContractError") return void 0;
 			const status = errorHttpStatus(value);
 			if (status !== void 0 && status >= 400) return error.pendingCause === "request-rejected" || UNAVAILABLE_STATUSES.has(status) ? value : void 0;
-			if (error.pendingCause === "request-rejected" && (value instanceof AgentEvalError || isProviderSchemaRejection(value) || isDispatchNotAdmitted(value) || isCredentialRefusal(value) || capacityCode(value) !== void 0)) return value;
+			if (error.pendingCause === "request-rejected" && (value instanceof AgentEvalError || isProviderSchemaRejection(value) || isDispatchNotAdmitted(value) || isCredentialRefusal(value) || UNAVAILABLE_CODES.has(ownCode(value)?.toLowerCase() ?? ""))) return value;
 			const members = Reflect.get(value, "errors");
 			if (Array.isArray(members)) queue.push(...members.slice(0, 12 - steps));
 			queue.push(value.cause);
@@ -17408,6 +17499,6 @@ async function noWinner(settled, rejection) {
 		reason: "no-result-selected"
 	};
 }
-export { DEFAULT_PEER_MAIL_LIMITS as $, renderUnsupported as $t, createSandboxForSpec as A, priceTokens as At, createRouterTranscript as B, runSettledCommand as Bt, createExecutor as C, bestComposite as Ct, runAgentRounds as D, isFiniteNumber as Dt, createSteerableSandboxSession as E, failedItems as Et, codeModeArguments as F, readCodexRolloutSession as Ft, LEAF_CONTINUATION_TASK as G, assertProfileMaterialization as Gt, createAgentEnvironmentProviderRegistry as H, LOCAL_HARNESSES as Ht, codeModeModelOutput as I, createPushTraceSource as It, createInPlaceCliExecutor as J, defineProfileMaterializationContract as Jt, providerAsSandboxClient as K, assertProfileMaterializes as Kt, createCodeModeTools as L, bridgeRuntimeAttachmentsKey as Lt, acquireSandbox as M, addHarnessUsage as Mt, TERMINAL_DECISIONS as N, createCodexRolloutStoreReader as Nt, assertBoxlessPromptOptions as O, bridgeAdmissionRefusal as Ot, defaultSelectWinner as P, harnessUsageIsEmpty as Pt, AUTHORITY_MARKERS as Q, promptModelProfileMaterialization as Qt, runCodeMode as R, bridgeStopSignalKey as Rt, captureReusableExecutorConfig as S, admitContinuationPolicy as St, DEFAULT_SANDBOX_STEERING_MAX_TURNS as T, createContinuationKeeper as Tt, resolveAgentEnvironmentProvider as U, harnessInvocation as Ut, routerBrain as V, runWorktreeHarness as Vt, providerAsExecutor as W, terminateProcessTreeAndConfirm as Wt, createInbox as X, profileMaterializationAxes$1 as Xt, INBOX_RECEIPT_KEY as Y, fullProfileMaterialization as Yt, failPendingAfter as Z, promptControlProfileMaterialization as Zt, withDriverExecutor as _, gateFactoryOnDeliverable as _t, assertRunParking as a, readSandboxOutcome as an, peerMailVerbNames as at, createExecutorRegistry as b, verdictFromJudgeScore as bt, sleepScopeWait as c, HarnessTurnFailedError as ct, runFinalizer as d, classifyDriverFailure as dt, sandboxActProfileMaterialization as en, PEER_MAIL_WIRE_KEY as et, runTree as f, isContentFilterRefusal as ft, isDriverSpec as g, CheckUnavailableError as gt, driverExecutorFactory as h, upstreamUnavailableSignal as ht, RunParkedError as i, projectSandboxOutcome as in, peerMailTools as it, createSandboxLineage as j, ROUTER_PRICE_SOURCE as jt, readPromptOptions as k, bridgeModelRouteRefusal as kt, withRunParking as l, abandonablePending as lt, driverChild as m, undispatchedCredentialExit as mt, createSupervisor as n, unsupportedProfileDimensions as nn, createPeerMailbox as nt, bindScopeParkingDrain as o, taskToPrompt$1 as ot, createRootHandle as p, summarizeDriverAttempts as pt, createWorktreeCliExecutor as q, controlProfileMaterialization as qt, assertResumeLimits as r, worktreeCliProfileMaterialization as rn, isPeerMailEnvelope as rt, readRunParking as s, DriverAttemptsExhaustedError as st, DEFAULT_MAX_DEPTH as t, sandboxProfileMaterialization as tn, claimsAuthority as tt, bestDelivered as u, causedByPartialFailure as ut, InMemoryResultBlobStore as v, gateOnDeliverable as vt, snapshotExecutorConfig as w, checkVerdictOf as wt, bindReusableExecutorExecutionId as x, CONTINUATIONS_DIR as xt, InMemorySpawnJournal as y, mapExecutorResult as yt, toolResultText as z, defaultRunCommand as zt };
+export { DEFAULT_PEER_MAIL_LIMITS as $, promptModelProfileMaterialization as $t, createSandboxForSpec as A, bridgeModelRouteRefusal as At, createRouterTranscript as B, defaultRunCommand as Bt, createExecutor as C, admitContinuationPolicy as Ct, runAgentRounds as D, failedItems as Dt, createSteerableSandboxSession as E, createContinuationKeeper as Et, codeModeArguments as F, harnessUsageIsEmpty as Ft, LEAF_CONTINUATION_TASK as G, terminateProcessTreeAndConfirm as Gt, createAgentEnvironmentProviderRegistry as H, runWorktreeHarness as Ht, codeModeModelOutput as I, readCodexRolloutSession as It, createInPlaceCliExecutor as J, controlProfileMaterialization as Jt, providerAsSandboxClient as K, assertProfileMaterialization as Kt, createCodeModeTools as L, createPushTraceSource as Lt, acquireSandbox as M, ROUTER_PRICE_SOURCE as Mt, TERMINAL_DECISIONS as N, addHarnessUsage as Nt, assertBoxlessPromptOptions as O, isFiniteNumber as Ot, defaultSelectWinner as P, createCodexRolloutStoreReader as Pt, AUTHORITY_MARKERS as Q, promptControlProfileMaterialization as Qt, runCodeMode as R, bridgeRuntimeAttachmentsKey as Rt, captureReusableExecutorConfig as S, CONTINUATIONS_DIR as St, DEFAULT_SANDBOX_STEERING_MAX_TURNS as T, checkVerdictOf as Tt, resolveAgentEnvironmentProvider as U, LOCAL_HARNESSES as Ut, routerBrain as V, runSettledCommand as Vt, providerAsExecutor as W, harnessInvocation as Wt, createInbox as X, fullProfileMaterialization as Xt, INBOX_RECEIPT_KEY as Y, defineProfileMaterializationContract as Yt, failPendingAfter as Z, profileMaterializationAxes$1 as Zt, withDriverExecutor as _, CheckUnavailableError as _t, assertRunParking as a, projectSandboxOutcome as an, peerMailVerbNames as at, createExecutorRegistry as b, mapExecutorResult as bt, sleepScopeWait as c, HarnessTurnFailedError as ct, runFinalizer as d, classifyDriverFailure as dt, renderUnsupported as en, PEER_MAIL_WIRE_KEY as et, runTree as f, isContentFilterRefusal as ft, isDriverSpec as g, preflightPublicCoordination as gt, driverExecutorFactory as h, upstreamUnavailableSignal as ht, RunParkedError as i, worktreeCliProfileMaterialization as in, peerMailTools as it, createSandboxLineage as j, priceTokens as jt, readPromptOptions as k, bridgeAdmissionRefusal as kt, withRunParking as l, abandonablePending as lt, driverChild as m, undispatchedCredentialExit as mt, createSupervisor as n, sandboxProfileMaterialization as nn, createPeerMailbox as nt, bindScopeParkingDrain as o, readSandboxOutcome as on, taskToPrompt$1 as ot, createRootHandle as p, summarizeDriverAttempts as pt, createWorktreeCliExecutor as q, assertProfileMaterializes as qt, assertResumeLimits as r, unsupportedProfileDimensions as rn, isPeerMailEnvelope as rt, readRunParking as s, DriverAttemptsExhaustedError as st, DEFAULT_MAX_DEPTH as t, sandboxActProfileMaterialization as tn, claimsAuthority as tt, bestDelivered as u, causedByPartialFailure as ut, InMemoryResultBlobStore as v, gateFactoryOnDeliverable as vt, snapshotExecutorConfig as w, bestComposite as wt, bindReusableExecutorExecutionId as x, verdictFromJudgeScore as xt, InMemorySpawnJournal as y, gateOnDeliverable as yt, toolResultText as z, bridgeStopSignalKey as zt };
 
-//# sourceMappingURL=supervisor-OHBlhBoh.js.map
+//# sourceMappingURL=supervisor-NnjJHuaL.js.map