@tangle-network/agent-runtime 3.0.25 → 3.0.28

package/dist/{scope-zYzxBt1q.js → scope-CO9ZhnIA.js}

@@ -13,7 +13,7 @@ import { collectAgentFinalMessageText, collectAgentResponseText } from "@tangle-
 import { z } from "zod";
 import { redact } from "@tangle-network/agent-eval/traces";
 import { createHash, randomUUID } from "node:crypto";
-import { setImmediate } from "node:timers/promises";
+import { setImmediate as setImmediate$1 } from "node:timers/promises";
 import { LedgerCanonicalizationError, canonicalString, jsonDocument, merkleLeafHash, merkleRoot, merkleSalt } from "@tangle-network/agent-eval/ledger-core";
 import { appendFileSync, closeSync, constants, existsSync, fstatSync, fsyncSync, lstatSync, mkdirSync, openSync, readFileSync, readdirSync, realpathSync, statSync, unlinkSync, writeSync } from "node:fs";
 import { dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
@@ -2579,9 +2579,9 @@ function traceRootWriter(blobs, nodeId) {
 			});
 			if (built === void 0) return void 0;
 			const { artifact, digest } = built;
-			await setImmediate();
+			await setImmediate$1();
 			const ref = contentAddress(artifact);
-			await setImmediate();
+			await setImmediate$1();
 			await blobs.put(ref, artifact);
 			rooted.add(digest);
 			return {
@@ -2618,7 +2618,7 @@ function slicer() {
 	let started = performance.now();
 	return () => {
 		if (performance.now() - started < SLICE_MS) return void 0;
-		return setImmediate().then(() => {
+		return setImmediate$1().then(() => {
 			started = performance.now();
 		});
 	};
@@ -3948,7 +3948,11 @@ function seatExecutionProfile(profile, stage) {
 			...profile.model,
 			default: stage.model,
 			provider: stage.provider,
-			...stage.reasoningEffort === void 0 ? {} : { reasoningEffort: stage.reasoningEffort }
+			...stage.reasoningEffort === void 0 ? {} : { reasoningEffort: stage.reasoningEffort },
+			...stage.credentialSource === void 0 ? {} : { metadata: {
+				...profile.model?.metadata,
+				credentialSource: stage.credentialSource
+			} }
 		}
 	};
 }
@@ -15334,15 +15338,13 @@ function assertSameSteerRequest(existing, candidate) {
 * `events`, its committed line count) is what `result.json` and `failure.json` carry. The winner's
 * `outRef` keeps its meaning; this is a separate reference.
 *
-* Durability boundary: each line is written synchronously to an `O_APPEND` descriptor before the
-* next event is drained, and the file is fsynced at every drive-attempt boundary and at close, not
-* per line. An fsync per line cost 7.1 ms per event over
-* 1,000 events and 8.1 ms over 5,000 (~80 s for a root emitting ten thousand text deltas, all of
-* it serialized inside the drain loop that also meters the budget); an async `FileHandle.write`
-* still cost 0.9 to 1.1 ms per line in the thread pool the children's journal writes share; a
-* `writeSync` costs 6 µs. A process kill loses nothing written; only a kernel crash or power
-* loss can drop lines written since the last fsync, and the reader's torn-tail rule keeps such a
-* file readable.
+* Durability boundary: lines appended in one event-loop turn reach an `O_APPEND` descriptor in one
+* fenced `writeSync` when the turn ends; the file is fsynced at each drive-attempt boundary and at
+* close. A fence fsyncs a lock-owner file (one ext4 journal commit): 10-20 ms on SSD and ~400 ms on
+* a busy SMR drive, where a fence per line drained 2.5 events/s while the model streamed hundreds
+* (us-legal-exploits-20261103a, 2026-11-02); grouped, a slow disk grows the groups, not the backlog.
+* A process kill loses at most the turn in progress; a kernel crash or power loss can drop lines
+* written since the last fsync, and the reader's torn-tail rule keeps such a file readable.
 *
 * The bridge wire carries text and tool calls only: cli-bridge's SSE frames decode
 * `delta.content` and `delta.tool_calls`, never a reasoning delta. A bridge-placed root's retained
@@ -15369,6 +15371,18 @@ function createRootStreamSink(runDir, now, file = ROOT_STREAM_FILE, options = {}
 	let attempt = 0;
 	let seq = 0;
 	let closed = false;
+	const pending = [];
+	let failure;
+	const flush = () => withClaim(() => {
+		const writer = fd;
+		if (pending.length === 0 || writer === void 0) return;
+		const lines = pending.splice(0).join("\n");
+		try {
+			fenceRunWrite(() => writeLine(writer, lines));
+		} catch (error) {
+			failure ??= error;
+		}
+	});
 	const openOnce = async () => {
 		if (fd !== void 0) return;
 		await mkdir(dirname(path), { recursive: true });
@@ -15398,47 +15412,40 @@ function createRootStreamSink(runDir, now, file = ROOT_STREAM_FILE, options = {}
 				if (closed) throw new Error("root stream: beginAttempt after close");
 				attempt += 1;
 				const writer = fd;
+				flush();
+				if (failure !== void 0) throw failure;
 				if (writer !== void 0) fenceRunWrite(() => fsyncSync(writer));
 				await openOnce();
 			});
 		},
 		append(event) {
-			return withClaim(() => fenceRunWrite(() => {
-				if (closed) throw new Error("root stream: append after close");
-				if (fd === void 0) throw new Error("root stream: append before beginAttempt");
-				const at = new Date(now()).toISOString();
-				const record = {
-					seq: seq + 1,
+			if (closed) throw new Error("root stream: append after close");
+			if (fd === void 0) throw new Error("root stream: append before beginAttempt");
+			if (failure !== void 0) throw failure;
+			seq += 1;
+			const at = new Date(now()).toISOString();
+			let line;
+			try {
+				line = JSON.stringify({
+					seq,
 					at,
 					attempt,
 					event
+				});
+			} catch (error) {
+				const dropped = {
+					kind: event.kind,
+					reason: errorMessage(error)
 				};
-				let line;
-				try {
-					line = JSON.stringify(record);
-				} catch (error) {
-					line = JSON.stringify({
-						seq: seq + 1,
-						at,
-						attempt,
-						dropped: {
-							kind: event.kind,
-							reason: errorMessage(error)
-						}
-					});
-				}
-				if (line === void 0) line = JSON.stringify({
-					seq: seq + 1,
+				line = JSON.stringify({
+					seq,
 					at,
 					attempt,
-					dropped: {
-						kind: event.kind,
-						reason: "event serialized to nothing"
-					}
+					dropped
 				});
-				writeLine(fd, line);
-				seq += 1;
-			}));
+			}
+			pending.push(line);
+			if (pending.length === 1) setImmediate(flush);
 		},
 		async close() {
 			return withClaim(async () => {
@@ -15447,6 +15454,8 @@ function createRootStreamSink(runDir, now, file = ROOT_STREAM_FILE, options = {}
 				const writer = fd;
 				if (writer === void 0) return void 0;
 				try {
+					flush();
+					if (failure !== void 0) throw failure;
 					fenceRunWrite(() => fsyncSync(writer));
 				} finally {
 					closeSync(writer);
@@ -15478,9 +15487,7 @@ async function readRootStreamReceipt(runDir, file = ROOT_STREAM_FILE) {
 	const hash = createHash("sha256");
 	let events = 0;
 	try {
-		for await (const _record of readCommittedJsonLines(path, { onBytes: (bytes) => {
-			hash.update(bytes);
-		} })) events += 1;
+		for await (const _record of readCommittedJsonLines(path, { onBytes: (bytes) => void hash.update(bytes) })) events += 1;
 	} catch (error) {
 		if (isNoEntError(error)) return void 0;
 		throw error;
@@ -16774,4 +16781,4 @@ async function recoverRetainedChildren(args, children, spawn, next) {
 }
 export { deriveNodeExecutionIdentity as $, exactSession as $i, persistHarnessTranscript as $n, RetainedExecutionPendingError as $r, insideCursorNamespace as $t, nestedScopeSeamKey as A, sandboxLeafOutputFromEvents as Ai, workerTraceEnv as An, recordRuntimeOwnedProviderDispatchNotStarted as Ar, beginScopeRetainedOwnerDrive as At, beginScopeOwnerAttempt as B, extractLlmCallEvent as Bi, flatOtelSpan as Bn, unknownMaterializationReceipt as Br, retainedOwnerWorkspaceRetentionSeamKey as Bt, writeWorkerSteerAcknowledgement as C, newUsageTotals as Ci, nativeCopyDelayMs as Cn, inheritRuntimeOwnedExecutorAttestation as Cr, environmentReader as Ct, isTraceAnalysisStore as D, createSandboxToolPartState as Di, openSlotGroup as Dn, providerAttemptEvidence as Dr, prepareScopeRetainedOwnerTask as Dt, replaySpawnTree as E, assertValidBudget as Ei, createWorkerSlots as En, newExecutionAttemptId as Er, consumeScopeRetainedOwnerResult as Et, recoverRetainedInteractiveRun as F, extractTransportEventIdentity as Fi, buildLoopOtelSpans as Fn, runtimeOwnedExecutorMaterialization as Fr, scopeRetainedOwnerRestorePoint as Ft, scopeOwnerExecutorNodeContext as G, sandboxTerminalUsageField as Gi, sanitizeKnowledgeReadinessReport as Gn, runtimeFlowBrain as Gr, materializeTreeView as Gt, noteScopeOwnerPlannedExecution as H, notifySandboxEventObserver as Hi, loopEventToOtelSpan as Hn, executableAgentSpecSnapshot as Hr, scopeRetainedOwnerJournalRoot as Ht, startRetainedInteractiveRun as I, assertSandboxServedModel as Ii, buildLoopSpanNodes as In, runtimeOwnedExecutorProviderEvidence as Ir, noteScopeRetainedOwnerCoordination as It, providerVisibleProfile as J, parseCodexUsageRecord as Ji, captureBoundHarnessTranscript as Jn, runtimeFailureCauseSchema as Jr, nestedDriverTreeRoot as Jt, coordinationMcpAlias as K, sumSandboxUsage as Ki, sanitizeRuntimeStreamEvent as Kn, reportedFailureCause as Kr, attestNestedDriverTreeOwner as Kt, FileSpawnJournal as L, canonicalSandboxUsageMode as Li, buildRuntimeEventOtelSpans as Ln, runtimeOwnedPendingExecutorMaterialization as Lr, scopeRetainedOwnerCheckpointing as Lt, attachWorker as M, sandboxProgressEvents as Mi, createPropagatingTraceEmitter as Mn, recordRuntimeOwnedProviderModel as Mr, scopeRetainedOwnerTurnEnded as Mt, readWorkerInteractiveBinding as N, terminalTextFromSandboxEvent as Ni, mergeTraceEnv as Nn, runtimeOwnedDriveHarnessProviderEvidence as Nr, assertRetainedOwnerCoordinationRekey as Nt, parseWorkerToolTraceArtifact as O, mapSandboxEvent as Oi, resolveWorkerSlots as On, recordRuntimeOwnedDriveHarnessProviderEvidence as Or, scopeRetainedOwnerPriorSpend as Ot, reconnectRetainedInteractiveRun as P, canonicalStreamEventFromSandboxEvent as Pi, readTraceContextFromEnv as Pn, runtimeOwnedExecutorExecutionBinding as Pr, reconcileScopeRetainedOwnerEnvironment as Pt, assertRecursiveReservationPolicy as Q, awaitAbortable$1 as Qi, harnessTranscriptUnavailable as Qn, DISPATCH_NOT_ADMITTED_CODE as Qr, closesCursorSlot as Qt, appendSpawnEvents as R, createSandboxTurnEventCollector as Ri, createOpenInferenceFileExporter as Rn, runtimeOwnedScopeOwnerRuntime as Rr, bindScopeRetainedOwnerEnvironmentId as Rt, writeWorkerSteer as S, meterUsageEvent as Si, captureProviderWorkspaceSnapshot as Sn, finalizeRuntimeOwnedPendingExecutor as Sr, scopeRetainedOwnerResourceReader as St, sumSpendFromEvents as T, spendFromUsageTotals as Ti, workspaceCaptureReceipt as Tn, knownMaterializationReceipt as Tr, abandonScopeRetainedOwnerInvocation as Tt, recordScopeOwnerMaterialization as U, sameModelId as Ui, createRuntimeEventCollector as Un, isRuntimeFlowBrain as Ur, loadSpawnForest as Ut, finalizeScopeOwnerMaterialization as V, isSandboxTerminalEvent as Vi, generateSpanId as Vn, executableAgentProfileSnapshot as Vr, scopeRetainedOwnerContext as Vt, restoreScopeOwnerAcceptedExecution as W, sandboxEventServedBackend as Wi, createRuntimeStreamEventCollector as Wn, runtimeFlowAgent as Wr, ownedTreeRootSpawn as Wt, reenteredWorkers as X, RetainedRunProviderContractError as Xi, harnessTranscriptArtifact as Xn, runtimeProviderCode as Xr, encodeResultBlob as Xt, runtimeGraphMetadataKey as Y, recordValue as Yi, captureHarnessTranscript as Yn, runtimeFailureRemediationSchema as Yr, FileResultBlobStore as Yt, settledToIteration as Z, assertEventBinding as Zi, harnessTranscriptFromLines as Zn, settlementFailureCause as Zr, SpawnEventIndex as Zt, supervisorRunDir as _, executorFailure as _i, destroyInteractiveEnvironment as _n, attestRuntimeOwnedExecutor as _r, startScopeRecoveries as _t, readRootStream as a, runAbortable as aa, retainedExecutorSeamKey as ai, reconnectRetainedRun as an, DEFAULT_STALL_AFTER_MS as ar, hasRetriableTeardowns as at, workerInboxFileFromEventDir as b, isCredentialRefusal as bi, assertProviderWorkspaceRetentionPort as bn, authoredAgentIdentity as br, prepareScopeRetainedOwnerSeatSwitch as bt, cancelWorker as c, promptOptionsFromAgentTurnInput as ca, cappedDoublingMs as ci, startRetainedRunInEnvironment as cn, readWorkerProgress as cr, recordScopeOwnerBarrenPause as ct, legacySupervisorRunsRoot as d, unavailableResumeAt as di, offerInteractiveControl as dn, SeatChain as dr, registerNestedTeardownScope as dt, freezeControlRef as ea, TRANSPORT_ERROR_CODES as ei, verifyWorkspaceMarker as en, readHarnessTranscript as er, freeSlots as et, readWorkerCancelRequests as f, unavailableSignalOfFailure as fi, prepareInteractiveDelegation as fn, SeatChainExhaustedError as fr, releaseHeldEnvironments as ft, safeWorkerFile as g, contentRef as gi, verifyObserverRecords as gn, attestRuntimeOwnedDeferredExecutor as gr, settleManagerWork as gt, readWorkerSteerRequests as h, contentAddress as hi, observerRecordDigest as hn, subscriptionUsageLimitSignal as hr, retryUnconfirmedTeardowns as ht, nodeStreamFile as i, linkAbort as ia, retainedExecutorContext as ii, mintRetainedIdentity as in, retainHarnessTranscript as ir, closeScopeAdmission as it, interactiveAdmissionSeamKey as j, sandboxOutputMarker as ji, workerTraceHeaders as jn, recordRuntimeOwnedProviderIdentityConflict as jr, scopeRetainedOwnerSettled as jt, workerTraceAnalysisStore as k, mapSandboxToolEvent as ki, WORKER_TRACE_PROPAGATION as kn, recordRuntimeOwnedProviderAttemptStart as kr, scopeRetainedOwnerResult as kt, claimWorkerSteerDelivery as l, providerMessageText as la, jitteredMs as li, retainedCreateMaterial as ln, isLiveNodeStatus as lr, recordScopeOwnerDriverAttempt as lt, readWorkerSteerAcknowledgement as m, TRACE_SUMMARY_SCHEMA as mi, createFileObserverHooks as mn, seatExecutionProfile as mr, releaseRetainedEnvironments as mt, ROOT_STREAM_FILE as n, RunCancellationReason as na, isSchemaRejection as ni, stopRetainedNativeExecution as nn, readBoundHarnessSessions as nr, rollingDispatch as nt, readRootStreamReceipt as o, signalAbortError as oa, UNAVAILABLE_CODES as oi, recoverRetainedRun as on, createActivityLog as or, meterRuntimeOwnedAccounting as ot, readWorkerCancellation as p, TRACE_ROOT_SCHEMA as pi, FileObserverJournal as pn, authoredSeatStages as pr, releaseManagerEnvironment as pt, coordinationProfileToolPrefix as q, decodeHarnessUsage as qi, HARNESS_TRANSCRIPT_SETTLE_TIMEOUT_MS as qn, runtimeFailureCause as qr, driverRuntime as qt, createRootStreamSink as r, abortReason as ra, registerRetainedExecutorPreparation as ri, assertRetainedRunReplayMaterial as rn, resolveHarnessTranscriptCapture as rr, closeRetainedSlots as rt, appendWorkerControlEvent as s, promptFromAgentTurnInput as sa, UNAVAILABLE_STATUSES as si, startRetainedRun as sn, describeToolArgs as sr, meterRuntimeOwnedProviderAttempt as st, createScope as t, sameControlCoordinates as ta, isProvisioningRefusal as ti, describeRetainedNativeStops as tn, HARNESS_TRANSCRIPT_READ_LIMITS as tr, queueOf as tt, legacySupervisorRunDir as u, unavailablePauseMs as ui, acceptedInteractiveControl as un, isTerminalNodeStatus as ur, recordScopeOwnerPause as ut, supervisorRunsRoot as v, hashJson as vi, environmentGone as vn, attestRuntimeOwnedPendingExecutor as vr, unconfirmedTeardowns as vt, prepareScopeResume as w, spendFromUsageEvents as wi, openNativeMirror as wn, knownExecutionBindingReceipt as wr, resolveSpawnResourcePaths as wt, writeWorkerCancellation as x, createBudgetPool as xi, captureProviderLiveWorkspace as xn, authoredProfileDigest as xr, releaseScopeRetainedOwnerForSeatPause as xt, workerCancellationsDir as y, credentialCommandExit as yi, DEFAULT_NATIVE_CAPTURE_INTERVAL_MS as yn, attestRuntimeOwnedScopeOwner as yr, waitForScopeChildren as yt, spawnJournalRecordEvents as z, createSandboxUsageLedger as zi, createOtelExporter as zn, unknownExecutionBindingReceipt as zr, bindScopeRetainedOwnerProvider as zt };
 
-//# sourceMappingURL=scope-zYzxBt1q.js.map
+//# sourceMappingURL=scope-CO9ZhnIA.js.map