@tangle-network/agent-runtime 3.0.22 → 3.0.24

package/dist/{scope-CLcWQe2X.js → scope-DKUxbkDo.js}

@@ -98,6 +98,147 @@ function promptPartFromInputPart(part) {
 		url: part.url
 	};
 }
+// src/runtime/supervise/abortable.ts
+/** Provenance of an explicit cancellation, preserved through every abort link. */
+var RunCancellationReason = class extends Error {
+	source;
+	operationId;
+	operator;
+	constructor(source, reason, operationId, operator) {
+		super(reason);
+		this.source = source;
+		this.operationId = operationId;
+		this.operator = operator;
+		this.name = "RunCancellationReason";
+	}
+	toString() {
+		return this.message;
+	}
+};
+/**
+* One abort race, and one abort cascade, for the supervision tree.
+*
+* Every layer that can be cancelled needs the same three things: the reason a signal
+* carries, an `AbortError` built from it, and a settle-once race between the work and
+* the signal. Written per layer, each drifts — a listener stops being removed on one
+* path, a late resolution overwrites a cancellation that already won, or a cascade
+* forwards no reason and renames every downstream death to the layer's own fallback.
+*
+* The fallback message is the only thing a layer supplies, so the error still names
+* which layer cancelled.
+*/
+/**
+* The reason a signal carries, or `fallback` when it states none.
+*
+* A cascade that drops the upstream reason turns every downstream death into its own generic
+* message: the worker's `down` record then says nothing about WHY, which makes a whole class of
+* child mortality undiagnosable from the journal alone.
+*/
+function abortReason(signal, fallback) {
+	const reason = signal.reason;
+	if (reason instanceof RunCancellationReason) return reason;
+	if (typeof reason === "string" && reason.length > 0) return reason;
+	if (reason instanceof Error && reason.name !== "AbortError" && reason.message.length > 0) return reason.message;
+	return fallback;
+}
+/** An `AbortError` carrying the signal's own string reason, or `fallback` when it states none. */
+function signalAbortError(signal, fallback) {
+	const reason = abortReason(signal, fallback);
+	const error = new Error(reason instanceof Error ? reason.message : typeof reason === "string" && reason.length > 0 ? reason : fallback);
+	error.name = "AbortError";
+	return error;
+}
+/**
+* Cascade N abort signals into one downstream abort that fires when ANY of them does, carrying
+* that signal's own reason ({@link abortReason}). Node-portable: `AbortSignal.any` needs >=20.3
+* and the package floor is >=20, and it would drop the reason anyway.
+*
+* The one cascade every executor uses, so a reason forwarded here reaches every layer below.
+*/
+function linkAbort(...sources) {
+	const controller = new AbortController();
+	const listeners = [];
+	const release = () => {
+		for (const { source, onAbort } of listeners) source.removeEventListener("abort", onAbort);
+		listeners.length = 0;
+	};
+	const abort = (reason) => {
+		release();
+		controller.abort(reason);
+	};
+	const alreadyAborted = sources.find((source) => source.aborted);
+	if (alreadyAborted !== void 0) {
+		controller.abort(abortReason(alreadyAborted, "aborted by parent scope"));
+		return {
+			signal: controller.signal,
+			abort,
+			release
+		};
+	}
+	for (const source of sources) {
+		const onAbort = () => abort(abortReason(source, "aborted by parent scope"));
+		listeners.push({
+			source,
+			onAbort
+		});
+		source.addEventListener("abort", onAbort, { once: true });
+	}
+	return {
+		signal: controller.signal,
+		abort,
+		release
+	};
+}
+/**
+* Settle `act()` against `signal`. The first outcome wins and the listener is always
+* removed, so neither a late resolution nor a late abort can settle the promise twice.
+* The losing promise stays observed, so a late rejection cannot surface as an unhandled
+* process error.
+*
+* The abort rejection is deferred one microtask so a result the action had ALREADY
+* produced still wins. It does not hand the race to a listener the action registers
+* from inside `act()`: this function subscribes before it calls `act()`, so its own
+* abort handler runs first and settles the promise. A caller that must let the action
+* observe the abort itself has to hold a live promise and await that instead.
+*
+* A synchronous throw from `act()` propagates as the rejection, not as an abort.
+*/
+async function runAbortable(act, signal, fallback) {
+	const aborted = () => typeof fallback === "string" ? signalAbortError(signal, fallback) : fallback();
+	if (signal.aborted) throw aborted();
+	return await new Promise((resolve, reject) => {
+		let settled = false;
+		const cleanup = () => signal.removeEventListener("abort", onAbort);
+		const onAbort = () => {
+			queueMicrotask(() => {
+				if (settled) return;
+				settled = true;
+				cleanup();
+				reject(aborted());
+			});
+		};
+		signal.addEventListener("abort", onAbort, { once: true });
+		let work;
+		try {
+			work = Promise.resolve(act());
+		} catch (error) {
+			cleanup();
+			reject(error);
+			return;
+		}
+		work.then((value) => {
+			if (settled) return;
+			settled = true;
+			cleanup();
+			resolve(value);
+		}, (error) => {
+			if (settled) return;
+			settled = true;
+			cleanup();
+			reject(error);
+		});
+	});
+}
 // src/runtime/retained-run-binding.ts
 function exactSession(environment, controlRef) {
 	if (environment.id !== controlRef.environmentId || environment.provider !== controlRef.provider) throw new Error("provider reconstructed a different retained environment");
@@ -171,13 +312,7 @@ function cancellationRequest(controlRef, operationId, reason) {
 }
 async function exactSessionCancel(session, request, options) {
 	if (!session.cancelRun) throw new Error("provider session does not expose durable cancellation operations");
-	let acknowledgement;
-	try {
-		acknowledgement = await awaitAbortable$1(Promise.resolve().then(() => session.cancelRun(request, options)), options.signal);
-	} catch (error) {
-		if (error instanceof RetainedRunProviderContractError) throw error;
-		throw error;
-	}
+	const acknowledgement = await awaitAbortable$1(Promise.resolve().then(() => session.cancelRun(request, options)), options.signal);
 	let exactAcknowledgement;
 	try {
 		exactAcknowledgement = AgentRunCancellationAcknowledgementSchema.parse(acknowledgement);
@@ -192,34 +327,8 @@ function hasDurableCancel(session) {
 }
 async function awaitAbortable$1(work, signal) {
 	if (signal === void 0) return await work;
-	if (signal.aborted) {
-		Promise.resolve(work).catch(() => void 0);
-		throw abortError(signal.reason);
-	}
-	return await new Promise((resolve, reject) => {
-		let settled = false;
-		const cleanup = () => signal.removeEventListener("abort", onAbort);
-		const onAbort = () => {
-			queueMicrotask(() => {
-				if (settled) return;
-				settled = true;
-				cleanup();
-				reject(abortError(signal.reason));
-			});
-		};
-		signal.addEventListener("abort", onAbort, { once: true });
-		Promise.resolve(work).then((value) => {
-			if (settled) return;
-			settled = true;
-			cleanup();
-			resolve(value);
-		}, (error) => {
-			if (settled) return;
-			settled = true;
-			cleanup();
-			reject(error);
-		});
-	});
+	if (signal.aborted) Promise.resolve(work).catch(() => void 0);
+	return await runAbortable(() => Promise.resolve(work), signal, () => abortError(signal.reason));
 }
 async function exactSessionResult(session) {
 	return session.result();
@@ -1679,7 +1788,13 @@ function openBudgetLedger(root, runStartedAtMs) {
 		usdMeasured: true,
 		freeIterations: root.maxIterations,
 		reservedIterations: 0,
-		committedIterations: 0
+		committedIterations: 0,
+		ownerSpent: {
+			iterations: 0,
+			tokens: zeroTokenUsage(),
+			usd: 0,
+			ms: 0
+		}
 	};
 }
 function ledgerValidateUnits(l, spend) {
@@ -1757,11 +1872,12 @@ function ledgerShortfalls(l, b, keep) {
 		else if (limit > state.remaining) short(`resource:${name}`, limit, state.remaining, state.reserved);
 	}
 	if (l.usdCapped && l.usdTainted) short("usd", wantUsd, 0, 0, true);
-	const tokensFree = l.freeTokens - (keep?.tokens ?? 0);
-	const iterationsFree = l.freeIterations - (keep?.iterations ?? 0);
+	const kept = (share = 0, spent) => Math.max(0, share - spent);
+	const tokensFree = l.freeTokens - kept(keep?.tokens, chargedTokens(l.ownerSpent.tokens));
+	const iterationsFree = l.freeIterations - kept(keep?.iterations, l.ownerSpent.iterations);
 	if (wantTokens > tokensFree) short("tokens", wantTokens, tokensFree, l.reservedTokens);
 	if (wantIterations > iterationsFree) short("iterations", wantIterations, iterationsFree, l.reservedIterations);
-	const usdFree = l.freeUsd - (keep?.usd ?? 0);
+	const usdFree = l.freeUsd - kept(keep?.usd, l.ownerSpent.usd);
 	if (l.usdCapped && !l.usdTainted && wantUsd > usdFree) short("usd", wantUsd, usdFree, l.reservedUsd);
 	return shortfalls;
 }
@@ -1776,11 +1892,8 @@ function ledgerTake(l, b) {
 	l.reservedTokens += b.maxTokens;
 	l.freeIterations -= b.maxIterations;
 	l.reservedIterations += b.maxIterations;
-	const wantUsd = b.maxUsd ?? 0;
-	if (wantUsd > 0) {
-		l.freeUsd -= wantUsd;
-		l.reservedUsd += wantUsd;
-	}
+	l.freeUsd -= b.maxUsd ?? 0;
+	l.reservedUsd += b.maxUsd ?? 0;
 }
 /**
 * The overspends a settlement of `spent` against `held` decides, before any balance moves. An
@@ -1843,6 +1956,13 @@ function ledgerSettle(l, held, spent, unknownUnderCap) {
 * turn" the pool must never see.
 */
 function ledgerObserve(l, spend, unknownUnderCap, requireAllResources) {
+	debit(l, spend);
+	l.ownerSpent = addSpend(l.ownerSpent, spend);
+	if (unknownUnderCap) l.usdTainted = true;
+	return ledgerCommitResources(l, spend, void 0, requireAllResources);
+}
+/** Move measured `spend` from free to committed on the token, iteration and dollar channels. */
+function debit(l, spend) {
 	noteUnknowns(l, spend);
 	const tokens = chargedTokens(spend.tokens);
 	l.freeTokens -= tokens;
@@ -1851,8 +1971,6 @@ function ledgerObserve(l, spend, unknownUnderCap, requireAllResources) {
 	l.committedIterations += spend.iterations;
 	l.committedUsd += spend.usd;
 	if (l.usdCapped) l.freeUsd -= spend.usd;
-	if (unknownUnderCap) l.usdTainted = true;
-	return ledgerCommitResources(l, spend, void 0, requireAllResources);
 }
 /**
 * Reconstruct the balances from a prior process's durable record. Measured prior spend is debited
@@ -1861,25 +1979,17 @@ function ledgerObserve(l, spend, unknownUnderCap, requireAllResources) {
 * the prior spend ALREADY happened, and refusing to record it would be a zero-cost restart.
 */
 function ledgerRestore(l, root, restore) {
+	if (restore.owner) l.ownerSpent = addSpend(l.ownerSpent, restore.owner);
 	if (restore.committed !== void 0) {
 		const committed = restore.committed;
 		assertValidSpend(committed, "budget restore committed");
 		ledgerValidateUnits(l, committed);
 		ledgerCommitResources(l, committed);
-		noteUnknowns(l, committed);
-		const tokens = chargedTokens(committed.tokens);
-		l.freeTokens -= tokens;
-		l.committedTokens += tokens;
-		l.freeIterations -= committed.iterations;
-		l.committedIterations += committed.iterations;
-		l.committedUsd += committed.usd;
-		if (l.usdCapped) {
-			l.freeUsd -= committed.usd;
-			if (committed.usdKnown === false) {
-				l.usdTainted = true;
-				if (l.freeUsd > 0) l.committedUsd += l.freeUsd;
-				l.freeUsd = 0;
-			}
+		debit(l, committed);
+		if (l.usdCapped && committed.usdKnown === false) {
+			l.usdTainted = true;
+			if (l.freeUsd > 0) l.committedUsd += l.freeUsd;
+			l.freeUsd = 0;
 		}
 	}
 	for (const [index, uncertain] of (restore.uncertainReservations ?? []).entries()) {
@@ -2633,7 +2743,10 @@ const UNAVAILABLE_CODES = /* @__PURE__ */ new Set([
 	"provider_key_invalid",
 	"rate_limit_exceeded",
 	"rate_limit_error",
-	"overloaded_error"
+	"overloaded_error",
+	"capacity_exhausted",
+	"host_pressure",
+	"provisioning_paused"
 ]);
 /** 429 Too Many Requests, 503 Service Unavailable, and 529, which Anthropic uses for overload. */
 const UNAVAILABLE_STATUSES = /* @__PURE__ */ new Set([
@@ -2957,7 +3070,6 @@ function prepareRetainedExecutor(factory, input) {
 }
 // src/runtime/failure-cause.ts
 const MAX_CAUSE_CHARS = 2048;
-const MAX_CHAIN_STEPS = 12;
 const MACHINE_CODE_PATTERN = /^[A-Za-z][A-Za-z0-9_.-]{0,63}$/u;
 /** @internal Canonical producer-supplied remediation, shared by transport and read models. */
 const runtimeFailureRemediationSchema = z.object({
@@ -3034,23 +3146,6 @@ function read(value, key) {
 		return;
 	}
 }
-/** Every object in a failure's cause chain and aggregate members, bounded and cycle-safe. */
-function chain(error) {
-	const out = [];
-	const queue = [error];
-	while (queue.length > 0 && out.length < MAX_CHAIN_STEPS) {
-		const value = queue.shift();
-		if (typeof value !== "object" || value === null || out.includes(value)) continue;
-		out.push(value);
-		const members = read(value, "errors");
-		if (Array.isArray(members)) {
-			const limit = Math.min(members.length, MAX_CHAIN_STEPS);
-			for (let index = 0; index < limit; index++) queue.push(read(members, String(index)));
-		}
-		queue.push(read(value, "cause"));
-	}
-	return out;
-}
 const UNATTRIBUTED = {
 	code: "unknown",
 	owner: "unknown"
@@ -3142,7 +3237,7 @@ function runtimeFailureCause(error, context = {}) {
 	const cause = errMessage(error).slice(0, MAX_CAUSE_CHARS);
 	const caller = context.signal?.aborted ? "aborted" : context.deadlineExpired ? "deadline-exceeded" : void 0;
 	try {
-		const links = chain(error);
+		const links = causeChain(error);
 		const providerCode = upstreamMachineCode(links);
 		const upstream = links.find((link) => link instanceof BackendTransportError && link.backend === "bridge" && link.status === 403 && link.upstreamCode === "subscription_required" && link.providerDispatch === "not_started");
 		const remedy = runtimeFailureRemediationSchema.readonly().safeParse(upstream?.remediation);
@@ -3665,146 +3760,6 @@ function providerAttemptEvidence(model) {
 		models
 	});
 }
-// src/runtime/supervise/abortable.ts
-/** Provenance of an explicit cancellation, preserved through every abort link. */
-var RunCancellationReason = class extends Error {
-	source;
-	operationId;
-	operator;
-	constructor(source, reason, operationId, operator) {
-		super(reason);
-		this.source = source;
-		this.operationId = operationId;
-		this.operator = operator;
-		this.name = "RunCancellationReason";
-	}
-	toString() {
-		return this.message;
-	}
-};
-/**
-* One abort race, and one abort cascade, for the supervision tree.
-*
-* Every layer that can be cancelled needs the same three things: the reason a signal
-* carries, an `AbortError` built from it, and a settle-once race between the work and
-* the signal. Written per layer, each drifts — a listener stops being removed on one
-* path, a late resolution overwrites a cancellation that already won, or a cascade
-* forwards no reason and renames every downstream death to the layer's own fallback.
-*
-* The fallback message is the only thing a layer supplies, so the error still names
-* which layer cancelled.
-*/
-/**
-* The reason a signal carries, or `fallback` when it states none.
-*
-* A cascade that drops the upstream reason turns every downstream death into its own generic
-* message: the worker's `down` record then says nothing about WHY, which makes a whole class of
-* child mortality undiagnosable from the journal alone.
-*/
-function abortReason(signal, fallback) {
-	const reason = signal.reason;
-	if (reason instanceof RunCancellationReason) return reason;
-	if (typeof reason === "string" && reason.length > 0) return reason;
-	if (reason instanceof Error && reason.name !== "AbortError" && reason.message.length > 0) return reason.message;
-	return fallback;
-}
-/** An `AbortError` carrying the signal's own string reason, or `fallback` when it states none. */
-function signalAbortError(signal, fallback) {
-	const reason = abortReason(signal, fallback);
-	const error = new Error(reason instanceof Error ? reason.message : typeof reason === "string" && reason.length > 0 ? reason : fallback);
-	error.name = "AbortError";
-	return error;
-}
-/**
-* Cascade N abort signals into one downstream abort that fires when ANY of them does, carrying
-* that signal's own reason ({@link abortReason}). Node-portable: `AbortSignal.any` needs >=20.3
-* and the package floor is >=20, and it would drop the reason anyway.
-*
-* The one cascade every executor uses, so a reason forwarded here reaches every layer below.
-*/
-function linkAbort(...sources) {
-	const controller = new AbortController();
-	const listeners = [];
-	const release = () => {
-		for (const { source, onAbort } of listeners) source.removeEventListener("abort", onAbort);
-		listeners.length = 0;
-	};
-	const abort = (reason) => {
-		release();
-		controller.abort(reason);
-	};
-	const alreadyAborted = sources.find((source) => source.aborted);
-	if (alreadyAborted !== void 0) {
-		controller.abort(abortReason(alreadyAborted, "aborted by parent scope"));
-		return {
-			signal: controller.signal,
-			abort,
-			release
-		};
-	}
-	for (const source of sources) {
-		const onAbort = () => abort(abortReason(source, "aborted by parent scope"));
-		listeners.push({
-			source,
-			onAbort
-		});
-		source.addEventListener("abort", onAbort, { once: true });
-	}
-	return {
-		signal: controller.signal,
-		abort,
-		release
-	};
-}
-/**
-* Settle `act()` against `signal`. The first outcome wins and the listener is always
-* removed, so neither a late resolution nor a late abort can settle the promise twice.
-* The losing promise stays observed, so a late rejection cannot surface as an unhandled
-* process error.
-*
-* The abort rejection is deferred one microtask so a result the action had ALREADY
-* produced still wins. It does not hand the race to a listener the action registers
-* from inside `act()`: this function subscribes before it calls `act()`, so its own
-* abort handler runs first and settles the promise. A caller that must let the action
-* observe the abort itself has to hold a live promise and await that instead.
-*
-* A synchronous throw from `act()` propagates as the rejection, not as an abort.
-*/
-async function runAbortable(act, signal, fallback) {
-	if (signal.aborted) throw signalAbortError(signal, fallback);
-	return await new Promise((resolve, reject) => {
-		let settled = false;
-		const cleanup = () => signal.removeEventListener("abort", onAbort);
-		const onAbort = () => {
-			queueMicrotask(() => {
-				if (settled) return;
-				settled = true;
-				cleanup();
-				reject(signalAbortError(signal, fallback));
-			});
-		};
-		signal.addEventListener("abort", onAbort, { once: true });
-		let work;
-		try {
-			work = Promise.resolve(act());
-		} catch (error) {
-			cleanup();
-			reject(error);
-			return;
-		}
-		work.then((value) => {
-			if (settled) return;
-			settled = true;
-			cleanup();
-			resolve(value);
-		}, (error) => {
-			if (settled) return;
-			settled = true;
-			cleanup();
-			reject(error);
-		});
-	});
-}
 // src/runtime/supervise/seat-chain.ts
 var SeatChainExhaustedError = class extends Error {
 	resumeAt;
@@ -14733,7 +14688,7 @@ function sumSpendFromEvents(events) {
 	}
 	return totals;
 }
-function sumMeasuredSpendFromEvents(events) {
+function sumMeasuredSpendFromEvents(events, ownerId) {
 	const budgets = new Map(events.flatMap((event) => event.kind === "spawned" ? [[event.id, event.budget]] : []));
 	let childWork = zeroSpend();
 	let driverInference = zeroSpend();
@@ -14752,9 +14707,11 @@ function sumMeasuredSpendFromEvents(events) {
 	}
 	for (const [id, floor] of floors) childWork = addSpend(childWork, withBudgetResources(floor.spent, budgets.get(id) ?? {}));
 	for (const [id, spend] of owners) driverInference = addSpend(driverInference, withBudgetResources(spend, budgets.get(id) ?? {}));
+	const owner = ownerId === void 0 ? void 0 : owners.get(ownerId);
 	return {
 		childWork,
-		driverInference
+		driverInference,
+		owner
 	};
 }
 /** Restore the same journal projection and accounting for root and nested scopes. @internal */
@@ -14765,13 +14722,14 @@ async function prepareScopeResume(opts, events, signal, now, parentId = opts.run
 	const prior = prepared.events;
 	const recovering = new Set(prepared.recoveries.map((item) => item.spawned.id));
 	const measuredEvents = prior.filter((event) => event.kind !== "metered" && event.kind !== "reconciled" || !recovering.has(event.id));
-	const measured = sumMeasuredSpendFromEvents(measuredEvents);
+	const measured = sumMeasuredSpendFromEvents(measuredEvents, parentId);
 	const hasCommittedEvidence = measuredEvents.some((event) => event.kind === "metered" || event.kind === "reconciled" || event.kind === "settled" || event.kind === "cancelled");
 	const settled = await replaySpawnTree(opts.journal, opts.blobs, opts.runId);
 	if (!settleOnly) signal.throwIfAborted();
 	return {
 		poolRestore: {
 			...hasCommittedEvidence ? { committed: addSpend(measured.childWork, measured.driverInference) } : {},
+			owner: measured.owner,
 			uncertainReservations: uncertainSpawnBudgets(prior, recovering)
 		},
 		resumeFrom: {
@@ -16813,6 +16771,6 @@ async function recoverRetainedChildren(args, children, spawn, next) {
 		throw error;
 	}
 }
-export { deriveNodeExecutionIdentity as $, recordValue as $i, persistHarnessTranscript as $n, runtimeFailureCauseSchema as $r, insideCursorNamespace as $t, nestedScopeSeamKey as A, assertValidBudget as Ai, workerTraceEnv as An, knownMaterializationReceipt as Ar, beginScopeRetainedOwnerDrive as At, beginScopeOwnerAttempt as B, assertSandboxServedModel as Bi, flatOtelSpan as Bn, runtimeOwnedExecutorMaterialization as Br, retainedOwnerWorkspaceRetentionSeamKey as Bt, writeWorkerSteerAcknowledgement as C, credentialCommandExit as Ci, nativeCopyDelayMs as Cn, attestRuntimeOwnedPendingExecutor as Cr, environmentReader as Ct, isTraceAnalysisStore as D, newUsageTotals as Di, openSlotGroup as Dn, finalizeRuntimeOwnedPendingExecutor as Dr, prepareScopeRetainedOwnerTask as Dt, replaySpawnTree as E, meterUsageEvent as Ei, createWorkerSlots as En, authoredProfileDigest as Er, consumeScopeRetainedOwnerResult as Et, recoverRetainedInteractiveRun as F, sandboxOutputMarker as Fi, buildLoopOtelSpans as Fn, recordRuntimeOwnedProviderDispatchNotStarted as Fr, scopeRetainedOwnerRestorePoint as Ft, scopeOwnerExecutorNodeContext as G, isSandboxTerminalEvent as Gi, sanitizeKnowledgeReadinessReport as Gn, unknownMaterializationReceipt as Gr, materializeTreeView as Gt, noteScopeOwnerPlannedExecution as H, createSandboxTurnEventCollector as Hi, loopEventToOtelSpan as Hn, runtimeOwnedPendingExecutorMaterialization as Hr, scopeRetainedOwnerJournalRoot as Ht, startRetainedInteractiveRun as I, sandboxProgressEvents as Ii, buildLoopSpanNodes as In, recordRuntimeOwnedProviderIdentityConflict as Ir, noteScopeRetainedOwnerCoordination as It, providerVisibleProfile as J, sandboxEventServedBackend as Ji, captureBoundHarnessTranscript as Jn, isRuntimeFlowBrain as Jr, nestedDriverTreeRoot as Jt, coordinationMcpAlias as K, notifySandboxEventObserver as Ki, sanitizeRuntimeStreamEvent as Kn, executableAgentProfileSnapshot as Kr, attestNestedDriverTreeOwner as Kt, FileSpawnJournal as L, terminalTextFromSandboxEvent as Li, buildRuntimeEventOtelSpans as Ln, recordRuntimeOwnedProviderModel as Lr, scopeRetainedOwnerCheckpointing as Lt, attachWorker as M, mapSandboxEvent as Mi, createPropagatingTraceEmitter as Mn, providerAttemptEvidence as Mr, scopeRetainedOwnerTurnEnded as Mt, readWorkerInteractiveBinding as N, mapSandboxToolEvent as Ni, mergeTraceEnv as Nn, recordRuntimeOwnedDriveHarnessProviderEvidence as Nr, assertRetainedOwnerCoordinationRekey as Nt, parseWorkerToolTraceArtifact as O, spendFromUsageEvents as Oi, resolveWorkerSlots as On, inheritRuntimeOwnedExecutorAttestation as Or, scopeRetainedOwnerPriorSpend as Ot, reconnectRetainedInteractiveRun as P, sandboxLeafOutputFromEvents as Pi, readTraceContextFromEnv as Pn, recordRuntimeOwnedProviderAttemptStart as Pr, reconcileScopeRetainedOwnerEnvironment as Pt, assertRecursiveReservationPolicy as Q, parseCodexUsageRecord as Qi, harnessTranscriptUnavailable as Qn, runtimeFailureCause as Qr, closesCursorSlot as Qt, appendSpawnEvents as R, canonicalStreamEventFromSandboxEvent as Ri, createOpenInferenceFileExporter as Rn, runtimeOwnedDriveHarnessProviderEvidence as Rr, bindScopeRetainedOwnerEnvironmentId as Rt, writeWorkerSteer as S, hashJson as Si, captureProviderWorkspaceSnapshot as Sn, attestRuntimeOwnedExecutor as Sr, scopeRetainedOwnerResourceReader as St, sumSpendFromEvents as T, createBudgetPool as Ti, workspaceCaptureReceipt as Tn, authoredAgentIdentity as Tr, abandonScopeRetainedOwnerInvocation as Tt, recordScopeOwnerMaterialization as U, createSandboxUsageLedger as Ui, createRuntimeEventCollector as Un, runtimeOwnedScopeOwnerRuntime as Ur, loadSpawnForest as Ut, finalizeScopeOwnerMaterialization as V, canonicalSandboxUsageMode as Vi, generateSpanId as Vn, runtimeOwnedExecutorProviderEvidence as Vr, scopeRetainedOwnerContext as Vt, restoreScopeOwnerAcceptedExecution as W, extractLlmCallEvent as Wi, createRuntimeStreamEventCollector as Wn, unknownExecutionBindingReceipt as Wr, ownedTreeRootSpawn as Wt, reenteredWorkers as X, sumSandboxUsage as Xi, harnessTranscriptArtifact as Xn, runtimeFlowBrain as Xr, encodeResultBlob as Xt, runtimeGraphMetadataKey as Y, sandboxTerminalUsageField as Yi, captureHarnessTranscript as Yn, runtimeFlowAgent as Yr, FileResultBlobStore as Yt, settledToIteration as Z, decodeHarnessUsage as Zi, harnessTranscriptFromLines as Zn, reportedFailureCause as Zr, SpawnEventIndex as Zt, supervisorRunDir as _, TRACE_ROOT_SCHEMA as _i, destroyInteractiveEnvironment as _n, abortReason as _r, startScopeRecoveries as _t, readRootStream as a, sameControlCoordinates as aa, isProvisioningRefusal as ai, reconnectRetainedRun as an, DEFAULT_STALL_AFTER_MS as ar, hasRetriableTeardowns as at, workerInboxFileFromEventDir as b, contentRef as bi, assertProviderWorkspaceRetentionPort as bn, signalAbortError as br, prepareScopeRetainedOwnerSeatSwitch as bt, cancelWorker as c, providerMessageText as ca, retainedExecutorContext as ci, startRetainedRunInEnvironment as cn, readWorkerProgress as cr, recordScopeOwnerBarrenPause as ct, legacySupervisorRunsRoot as d, UNAVAILABLE_STATUSES as di, offerInteractiveControl as dn, SeatChain as dr, registerNestedTeardownScope as dt, RetainedRunProviderContractError as ea, runtimeFailureRemediationSchema as ei, verifyWorkspaceMarker as en, readHarnessTranscript as er, freeSlots as et, readWorkerCancelRequests as f, cappedDoublingMs as fi, prepareInteractiveDelegation as fn, SeatChainExhaustedError as fr, releaseHeldEnvironments as ft, safeWorkerFile as g, unavailableSignalOfFailure as gi, verifyObserverRecords as gn, RunCancellationReason as gr, settleManagerWork as gt, readWorkerSteerRequests as h, unavailableResumeAt as hi, observerRecordDigest as hn, subscriptionUsageLimitSignal as hr, retryUnconfirmedTeardowns as ht, nodeStreamFile as i, freezeControlRef as ia, RetainedExecutionPendingError as ii, mintRetainedIdentity as in, retainHarnessTranscript as ir, closeScopeAdmission as it, interactiveAdmissionSeamKey as j, createSandboxToolPartState as ji, workerTraceHeaders as jn, newExecutionAttemptId as jr, scopeRetainedOwnerSettled as jt, workerTraceAnalysisStore as k, spendFromUsageTotals as ki, WORKER_TRACE_PROPAGATION as kn, knownExecutionBindingReceipt as kr, scopeRetainedOwnerResult as kt, claimWorkerSteerDelivery as l, retainedExecutorSeamKey as li, retainedCreateMaterial as ln, isLiveNodeStatus as lr, recordScopeOwnerDriverAttempt as lt, readWorkerSteerAcknowledgement as m, unavailablePauseMs as mi, createFileObserverHooks as mn, seatExecutionProfile as mr, releaseRetainedEnvironments as mt, ROOT_STREAM_FILE as n, awaitAbortable$1 as na, settlementFailureCause as ni, stopRetainedNativeExecution as nn, readBoundHarnessSessions as nr, rollingDispatch as nt, readRootStreamReceipt as o, promptFromAgentTurnInput as oa, isSchemaRejection as oi, recoverRetainedRun as on, createActivityLog as or, meterRuntimeOwnedAccounting as ot, readWorkerCancellation as p, jitteredMs as pi, FileObserverJournal as pn, authoredSeatStages as pr, releaseManagerEnvironment as pt, coordinationProfileToolPrefix as q, sameModelId as qi, HARNESS_TRANSCRIPT_SETTLE_TIMEOUT_MS as qn, executableAgentSpecSnapshot as qr, driverRuntime as qt, createRootStreamSink as r, exactSession as ra, DISPATCH_NOT_ADMITTED_CODE as ri, assertRetainedRunReplayMaterial as rn, resolveHarnessTranscriptCapture as rr, closeRetainedSlots as rt, appendWorkerControlEvent as s, promptOptionsFromAgentTurnInput as sa, registerRetainedExecutorPreparation as si, startRetainedRun as sn, describeToolArgs as sr, meterRuntimeOwnedProviderAttempt as st, createScope as t, assertEventBinding as ta, runtimeProviderCode as ti, describeRetainedNativeStops as tn, HARNESS_TRANSCRIPT_READ_LIMITS as tr, queueOf as tt, legacySupervisorRunDir as u, UNAVAILABLE_CODES as ui, acceptedInteractiveControl as un, isTerminalNodeStatus as ur, recordScopeOwnerPause as ut, supervisorRunsRoot as v, TRACE_SUMMARY_SCHEMA as vi, environmentGone as vn, linkAbort as vr, unconfirmedTeardowns as vt, prepareScopeResume as w, isCredentialRefusal as wi, openNativeMirror as wn, attestRuntimeOwnedScopeOwner as wr, resolveSpawnResourcePaths as wt, writeWorkerCancellation as x, executorFailure as xi, captureProviderLiveWorkspace as xn, attestRuntimeOwnedDeferredExecutor as xr, releaseScopeRetainedOwnerForSeatPause as xt, workerCancellationsDir as y, contentAddress as yi, DEFAULT_NATIVE_CAPTURE_INTERVAL_MS as yn, runAbortable as yr, waitForScopeChildren as yt, spawnJournalRecordEvents as z, extractTransportEventIdentity as zi, createOtelExporter as zn, runtimeOwnedExecutorExecutionBinding as zr, bindScopeRetainedOwnerProvider as zt };
+export { deriveNodeExecutionIdentity as $, exactSession as $i, persistHarnessTranscript as $n, RetainedExecutionPendingError as $r, insideCursorNamespace as $t, nestedScopeSeamKey as A, sandboxLeafOutputFromEvents as Ai, workerTraceEnv as An, recordRuntimeOwnedProviderDispatchNotStarted as Ar, beginScopeRetainedOwnerDrive as At, beginScopeOwnerAttempt as B, extractLlmCallEvent as Bi, flatOtelSpan as Bn, unknownMaterializationReceipt as Br, retainedOwnerWorkspaceRetentionSeamKey as Bt, writeWorkerSteerAcknowledgement as C, newUsageTotals as Ci, nativeCopyDelayMs as Cn, inheritRuntimeOwnedExecutorAttestation as Cr, environmentReader as Ct, isTraceAnalysisStore as D, createSandboxToolPartState as Di, openSlotGroup as Dn, providerAttemptEvidence as Dr, prepareScopeRetainedOwnerTask as Dt, replaySpawnTree as E, assertValidBudget as Ei, createWorkerSlots as En, newExecutionAttemptId as Er, consumeScopeRetainedOwnerResult as Et, recoverRetainedInteractiveRun as F, extractTransportEventIdentity as Fi, buildLoopOtelSpans as Fn, runtimeOwnedExecutorMaterialization as Fr, scopeRetainedOwnerRestorePoint as Ft, scopeOwnerExecutorNodeContext as G, sandboxTerminalUsageField as Gi, sanitizeKnowledgeReadinessReport as Gn, runtimeFlowBrain as Gr, materializeTreeView as Gt, noteScopeOwnerPlannedExecution as H, notifySandboxEventObserver as Hi, loopEventToOtelSpan as Hn, executableAgentSpecSnapshot as Hr, scopeRetainedOwnerJournalRoot as Ht, startRetainedInteractiveRun as I, assertSandboxServedModel as Ii, buildLoopSpanNodes as In, runtimeOwnedExecutorProviderEvidence as Ir, noteScopeRetainedOwnerCoordination as It, providerVisibleProfile as J, parseCodexUsageRecord as Ji, captureBoundHarnessTranscript as Jn, runtimeFailureCauseSchema as Jr, nestedDriverTreeRoot as Jt, coordinationMcpAlias as K, sumSandboxUsage as Ki, sanitizeRuntimeStreamEvent as Kn, reportedFailureCause as Kr, attestNestedDriverTreeOwner as Kt, FileSpawnJournal as L, canonicalSandboxUsageMode as Li, buildRuntimeEventOtelSpans as Ln, runtimeOwnedPendingExecutorMaterialization as Lr, scopeRetainedOwnerCheckpointing as Lt, attachWorker as M, sandboxProgressEvents as Mi, createPropagatingTraceEmitter as Mn, recordRuntimeOwnedProviderModel as Mr, scopeRetainedOwnerTurnEnded as Mt, readWorkerInteractiveBinding as N, terminalTextFromSandboxEvent as Ni, mergeTraceEnv as Nn, runtimeOwnedDriveHarnessProviderEvidence as Nr, assertRetainedOwnerCoordinationRekey as Nt, parseWorkerToolTraceArtifact as O, mapSandboxEvent as Oi, resolveWorkerSlots as On, recordRuntimeOwnedDriveHarnessProviderEvidence as Or, scopeRetainedOwnerPriorSpend as Ot, reconnectRetainedInteractiveRun as P, canonicalStreamEventFromSandboxEvent as Pi, readTraceContextFromEnv as Pn, runtimeOwnedExecutorExecutionBinding as Pr, reconcileScopeRetainedOwnerEnvironment as Pt, assertRecursiveReservationPolicy as Q, awaitAbortable$1 as Qi, harnessTranscriptUnavailable as Qn, DISPATCH_NOT_ADMITTED_CODE as Qr, closesCursorSlot as Qt, appendSpawnEvents as R, createSandboxTurnEventCollector as Ri, createOpenInferenceFileExporter as Rn, runtimeOwnedScopeOwnerRuntime as Rr, bindScopeRetainedOwnerEnvironmentId as Rt, writeWorkerSteer as S, meterUsageEvent as Si, captureProviderWorkspaceSnapshot as Sn, finalizeRuntimeOwnedPendingExecutor as Sr, scopeRetainedOwnerResourceReader as St, sumSpendFromEvents as T, spendFromUsageTotals as Ti, workspaceCaptureReceipt as Tn, knownMaterializationReceipt as Tr, abandonScopeRetainedOwnerInvocation as Tt, recordScopeOwnerMaterialization as U, sameModelId as Ui, createRuntimeEventCollector as Un, isRuntimeFlowBrain as Ur, loadSpawnForest as Ut, finalizeScopeOwnerMaterialization as V, isSandboxTerminalEvent as Vi, generateSpanId as Vn, executableAgentProfileSnapshot as Vr, scopeRetainedOwnerContext as Vt, restoreScopeOwnerAcceptedExecution as W, sandboxEventServedBackend as Wi, createRuntimeStreamEventCollector as Wn, runtimeFlowAgent as Wr, ownedTreeRootSpawn as Wt, reenteredWorkers as X, RetainedRunProviderContractError as Xi, harnessTranscriptArtifact as Xn, runtimeProviderCode as Xr, encodeResultBlob as Xt, runtimeGraphMetadataKey as Y, recordValue as Yi, captureHarnessTranscript as Yn, runtimeFailureRemediationSchema as Yr, FileResultBlobStore as Yt, settledToIteration as Z, assertEventBinding as Zi, harnessTranscriptFromLines as Zn, settlementFailureCause as Zr, SpawnEventIndex as Zt, supervisorRunDir as _, executorFailure as _i, destroyInteractiveEnvironment as _n, attestRuntimeOwnedExecutor as _r, startScopeRecoveries as _t, readRootStream as a, runAbortable as aa, retainedExecutorSeamKey as ai, reconnectRetainedRun as an, DEFAULT_STALL_AFTER_MS as ar, hasRetriableTeardowns as at, workerInboxFileFromEventDir as b, isCredentialRefusal as bi, assertProviderWorkspaceRetentionPort as bn, authoredAgentIdentity as br, prepareScopeRetainedOwnerSeatSwitch as bt, cancelWorker as c, promptOptionsFromAgentTurnInput as ca, cappedDoublingMs as ci, startRetainedRunInEnvironment as cn, readWorkerProgress as cr, recordScopeOwnerBarrenPause as ct, legacySupervisorRunsRoot as d, unavailableResumeAt as di, offerInteractiveControl as dn, SeatChain as dr, registerNestedTeardownScope as dt, freezeControlRef as ea, TRANSPORT_ERROR_CODES as ei, verifyWorkspaceMarker as en, readHarnessTranscript as er, freeSlots as et, readWorkerCancelRequests as f, unavailableSignalOfFailure as fi, prepareInteractiveDelegation as fn, SeatChainExhaustedError as fr, releaseHeldEnvironments as ft, safeWorkerFile as g, contentRef as gi, verifyObserverRecords as gn, attestRuntimeOwnedDeferredExecutor as gr, settleManagerWork as gt, readWorkerSteerRequests as h, contentAddress as hi, observerRecordDigest as hn, subscriptionUsageLimitSignal as hr, retryUnconfirmedTeardowns as ht, nodeStreamFile as i, linkAbort as ia, retainedExecutorContext as ii, mintRetainedIdentity as in, retainHarnessTranscript as ir, closeScopeAdmission as it, interactiveAdmissionSeamKey as j, sandboxOutputMarker as ji, workerTraceHeaders as jn, recordRuntimeOwnedProviderIdentityConflict as jr, scopeRetainedOwnerSettled as jt, workerTraceAnalysisStore as k, mapSandboxToolEvent as ki, WORKER_TRACE_PROPAGATION as kn, recordRuntimeOwnedProviderAttemptStart as kr, scopeRetainedOwnerResult as kt, claimWorkerSteerDelivery as l, providerMessageText as la, jitteredMs as li, retainedCreateMaterial as ln, isLiveNodeStatus as lr, recordScopeOwnerDriverAttempt as lt, readWorkerSteerAcknowledgement as m, TRACE_SUMMARY_SCHEMA as mi, createFileObserverHooks as mn, seatExecutionProfile as mr, releaseRetainedEnvironments as mt, ROOT_STREAM_FILE as n, RunCancellationReason as na, isSchemaRejection as ni, stopRetainedNativeExecution as nn, readBoundHarnessSessions as nr, rollingDispatch as nt, readRootStreamReceipt as o, signalAbortError as oa, UNAVAILABLE_CODES as oi, recoverRetainedRun as on, createActivityLog as or, meterRuntimeOwnedAccounting as ot, readWorkerCancellation as p, TRACE_ROOT_SCHEMA as pi, FileObserverJournal as pn, authoredSeatStages as pr, releaseManagerEnvironment as pt, coordinationProfileToolPrefix as q, decodeHarnessUsage as qi, HARNESS_TRANSCRIPT_SETTLE_TIMEOUT_MS as qn, runtimeFailureCause as qr, driverRuntime as qt, createRootStreamSink as r, abortReason as ra, registerRetainedExecutorPreparation as ri, assertRetainedRunReplayMaterial as rn, resolveHarnessTranscriptCapture as rr, closeRetainedSlots as rt, appendWorkerControlEvent as s, promptFromAgentTurnInput as sa, UNAVAILABLE_STATUSES as si, startRetainedRun as sn, describeToolArgs as sr, meterRuntimeOwnedProviderAttempt as st, createScope as t, sameControlCoordinates as ta, isProvisioningRefusal as ti, describeRetainedNativeStops as tn, HARNESS_TRANSCRIPT_READ_LIMITS as tr, queueOf as tt, legacySupervisorRunDir as u, unavailablePauseMs as ui, acceptedInteractiveControl as un, isTerminalNodeStatus as ur, recordScopeOwnerPause as ut, supervisorRunsRoot as v, hashJson as vi, environmentGone as vn, attestRuntimeOwnedPendingExecutor as vr, unconfirmedTeardowns as vt, prepareScopeResume as w, spendFromUsageEvents as wi, openNativeMirror as wn, knownExecutionBindingReceipt as wr, resolveSpawnResourcePaths as wt, writeWorkerCancellation as x, createBudgetPool as xi, captureProviderLiveWorkspace as xn, authoredProfileDigest as xr, releaseScopeRetainedOwnerForSeatPause as xt, workerCancellationsDir as y, credentialCommandExit as yi, DEFAULT_NATIVE_CAPTURE_INTERVAL_MS as yn, attestRuntimeOwnedScopeOwner as yr, waitForScopeChildren as yt, spawnJournalRecordEvents as z, createSandboxUsageLedger as zi, createOtelExporter as zn, unknownExecutionBindingReceipt as zr, bindScopeRetainedOwnerProvider as zt };
 
-//# sourceMappingURL=scope-CLcWQe2X.js.map
+//# sourceMappingURL=scope-DKUxbkDo.js.map