@tangle-network/agent-runtime 3.0.40 → 3.0.42

package/dist/{supervisor-BDnqTl_R.js → supervisor-BQz8lkcd.js}

@@ -1,4 +1,4 @@
-import { $i as awaitAbortable, $r as DISPATCH_NOT_ADMITTED_CODE, A as nestedScopeSeamKey, An as workerTraceEnv, Ar as recordRuntimeOwnedProviderDispatchNotStarted, Bi as createSandboxUsageLedger, Br as unknownMaterializationReceipt, Bt as retainedOwnerWorkspaceRetentionSeamKey, Cn as nativeCopyDelayMs, Cr as inheritRuntimeOwnedExecutorAttestation, Er as newExecutionAttemptId, Fr as runtimeOwnedExecutorMaterialization, Gi as sandboxEventServedBackend, Hi as isSandboxTerminalEvent, Hr as executableAgentSpecSnapshot, Ii as extractTransportEventIdentity, Jt as nestedDriverTreeRoot, Ki as sandboxTerminalUsageField, Kr as reportedFailureCause, Kt as attestNestedDriverTreeOwner, Li as assertSandboxServedModel, Lt as scopeRetainedOwnerCheckpointing, Mi as sandboxOutputMarker, Mr as recordRuntimeOwnedProviderModel, Ni as sandboxProgressEvents, Nn as mergeTraceEnv, Oi as createSandboxToolPartState, On as resolveWorkerSlots, Pr as runtimeOwnedExecutorExecutionBinding, Q as assertRecursiveReservationPolicy, Qi as assertEventBinding, Qn as harnessTranscriptUnavailable, Qr as DISPATCH_EXECUTION_CHANGED_CODE, Qt as closesCursorSlot, R as appendSpawnEvents, Ri as canonicalSandboxUsageMode, Rr as runtimeOwnedScopeOwnerRuntime, Si as createBudgetPool, Sn as captureProviderWorkspaceSnapshot, Sr as finalizeRuntimeOwnedPendingExecutor, T as sumSpendFromEvents, Tn as workspaceCaptureReceipt, Tr as knownMaterializationReceipt, Ui as notifySandboxEventObserver, Ut as loadSpawnForest, V as finalizeScopeOwnerMaterialization, Vr as executableAgentProfileSnapshot, Wi as sameModelId, Wt as ownedTreeRootSpawn, X as reenteredWorkers, Xi as recordValue, Xr as runtimeProviderCode, Xt as encodeResultBlob, Yi as parseCodexUsageRecord, Yn as captureHarnessTranscript, Yr as runtimeFailureRemediationSchema, Zi as RetainedRunProviderContractError, Zn as harnessTranscriptFromLines, Zt as SpawnEventIndex, _i as contentRef, _r as attestRuntimeOwnedExecutor, _t as startScopeRecoveries, aa as abortReason, ai as retainedExecutorContext, an as reconnectRetainedRun, at as hasRetriableTeardowns, bi as credentialCommandExit, bn as assertProviderWorkspaceRetentionPort, ci as UNAVAILABLE_STATUSES, di as unavailablePauseMs, dt as registerNestedTeardownScope, ea as exactSession, ei as RetainedExecutionPendingError, en as verifyWorkspaceMarker, ft as releaseHeldEnvironments, gi as contentAddress, gr as attestRuntimeOwnedDeferredExecutor, gt as settleManagerWork, hr as subscriptionUsageLimitSignal, ht as retryUnconfirmedTeardowns, ia as RunCancellationReason, in as mintRetainedIdentity, ir as retainHarnessTranscript, it as closeScopeAdmission, ji as sandboxLeafOutputFromEvents, jn as workerTraceHeaders, jr as recordRuntimeOwnedProviderIdentityConflict, jt as scopeRetainedOwnerSettled, kn as WORKER_TRACE_PROPAGATION, kr as recordRuntimeOwnedProviderAttemptStart, lr as isLiveNodeStatus, mt as releaseRetainedEnvironments, na as isTerminalSessionStatus, ni as isProvisioningRefusal, nn as stopRetainedNativeExecution, oa as linkAbort, oi as retainedExecutorSeamKey, on as recoverRetainedRun, or as createActivityLog, pi as unavailableSignalOfFailure, pt as releaseManagerEnvironment, qn as HARNESS_TRANSCRIPT_SETTLE_TIMEOUT_MS, qr as runtimeFailureCause, qt as driverRuntime, ra as sameControlCoordinates, ri as isSchemaRejection, rn as assertRetainedRunReplayMaterial, rt as closeRetainedSlots, sa as runAbortable, si as UNAVAILABLE_CODES, sn as startRetainedRun, sr as describeToolArgs, t as createScope, ta as freezeControlRef, ti as TRANSPORT_ERROR_CODES, tn as describeRetainedNativeStops, ua as promptOptionsFromAgentTurnInput, vn as environmentGone, vr as attestRuntimeOwnedPendingExecutor, vt as unconfirmedTeardowns, w as prepareScopeResume, wn as openNativeMirror, wr as knownExecutionBindingReceipt, xi as isCredentialRefusal, xn as captureProviderLiveWorkspace, yi as hashJson, yt as waitForScopeChildren, zi as createSandboxTurnEventCollector, zr as unknownExecutionBindingReceipt } from "./scope-BGWRFiYt.js";
+import { $i as awaitAbortable, $r as DISPATCH_NOT_ADMITTED_CODE, A as nestedScopeSeamKey, An as workerTraceEnv, Ar as recordRuntimeOwnedProviderDispatchNotStarted, Bi as createSandboxUsageLedger, Br as unknownMaterializationReceipt, Bt as retainedOwnerWorkspaceRetentionSeamKey, Cn as nativeCopyDelayMs, Cr as inheritRuntimeOwnedExecutorAttestation, Er as newExecutionAttemptId, Fr as runtimeOwnedExecutorMaterialization, Gi as sandboxEventServedBackend, Hi as isSandboxTerminalEvent, Hr as executableAgentSpecSnapshot, Ii as extractTransportEventIdentity, Jt as nestedDriverTreeRoot, Ki as sandboxTerminalUsageField, Kr as reportedFailureCause, Kt as attestNestedDriverTreeOwner, Li as assertSandboxServedModel, Lt as scopeRetainedOwnerCheckpointing, Mi as sandboxOutputMarker, Mr as recordRuntimeOwnedProviderModel, Ni as sandboxProgressEvents, Nn as mergeTraceEnv, Oi as createSandboxToolPartState, On as resolveWorkerSlots, Pr as runtimeOwnedExecutorExecutionBinding, Q as assertRecursiveReservationPolicy, Qi as assertEventBinding, Qn as harnessTranscriptUnavailable, Qr as DISPATCH_EXECUTION_CHANGED_CODE, Qt as closesCursorSlot, R as appendSpawnEvents, Ri as canonicalSandboxUsageMode, Rr as runtimeOwnedScopeOwnerRuntime, Si as createBudgetPool, Sn as captureProviderWorkspaceSnapshot, Sr as finalizeRuntimeOwnedPendingExecutor, T as sumSpendFromEvents, Tn as workspaceCaptureReceipt, Tr as knownMaterializationReceipt, Ui as notifySandboxEventObserver, Ut as loadSpawnForest, V as finalizeScopeOwnerMaterialization, Vr as executableAgentProfileSnapshot, Wi as sameModelId, Wt as ownedTreeRootSpawn, X as reenteredWorkers, Xi as recordValue, Xr as runtimeProviderCode, Xt as encodeResultBlob, Yi as parseCodexUsageRecord, Yn as captureHarnessTranscript, Yr as runtimeFailureRemediationSchema, Zi as RetainedRunProviderContractError, Zn as harnessTranscriptFromLines, Zt as SpawnEventIndex, _i as contentRef, _r as attestRuntimeOwnedExecutor, _t as startScopeRecoveries, aa as abortReason, ai as retainedExecutorContext, an as reconnectRetainedRun, at as hasRetriableTeardowns, bi as credentialCommandExit, bn as assertProviderWorkspaceRetentionPort, ci as UNAVAILABLE_STATUSES, di as unavailablePauseMs, dt as registerNestedTeardownScope, ea as exactSession, ei as RetainedExecutionPendingError, en as verifyWorkspaceMarker, ft as releaseHeldEnvironments, gi as contentAddress, gr as attestRuntimeOwnedDeferredExecutor, gt as settleManagerWork, hr as subscriptionUsageLimitSignal, ht as retryUnconfirmedTeardowns, ia as RunCancellationReason, in as mintRetainedIdentity, ir as retainHarnessTranscript, it as closeScopeAdmission, ji as sandboxLeafOutputFromEvents, jn as workerTraceHeaders, jr as recordRuntimeOwnedProviderIdentityConflict, jt as scopeRetainedOwnerSettled, kn as WORKER_TRACE_PROPAGATION, kr as recordRuntimeOwnedProviderAttemptStart, lr as isLiveNodeStatus, mt as releaseRetainedEnvironments, na as isTerminalSessionStatus, ni as isProvisioningRefusal, nn as stopRetainedNativeExecution, oa as linkAbort, oi as retainedExecutorSeamKey, on as recoverRetainedRun, or as createActivityLog, pi as unavailableSignalOfFailure, pt as releaseManagerEnvironment, qn as HARNESS_TRANSCRIPT_SETTLE_TIMEOUT_MS, qr as runtimeFailureCause, qt as driverRuntime, ra as sameControlCoordinates, ri as isSchemaRejection, rn as assertRetainedRunReplayMaterial, rt as closeRetainedSlots, sa as runAbortable, si as UNAVAILABLE_CODES, sn as startRetainedRun, sr as describeToolArgs, t as createScope, ta as freezeControlRef, ti as TRANSPORT_ERROR_CODES, tn as describeRetainedNativeStops, ua as promptOptionsFromAgentTurnInput, vn as environmentGone, vr as attestRuntimeOwnedPendingExecutor, vt as unconfirmedTeardowns, w as prepareScopeResume, wn as openNativeMirror, wr as knownExecutionBindingReceipt, xi as isCredentialRefusal, xn as captureProviderLiveWorkspace, yi as hashJson, yt as waitForScopeChildren, zi as createSandboxTurnEventCollector, zr as unknownExecutionBindingReceipt } from "./scope-D04GkJ6P.js";
 import { f as RuntimeRunStateError, i as ConfigError, m as ValidationError$1, r as BackendTransportError, t as AgentEvalError } from "./errors-AzSuGI23.js";
 import { $ as isAsyncIterable, J as deleteBoxSafe, Ot as teardownSurfaces, Q as isAbortError, St as armDeadlineTimer, Tt as isDeadlineAbortReason, U as addSpend, V as hasControlCharacter, W as addTokenUsage, Y as errorMessage, _t as ACCEPTED_RESULT_GRACE_MS, at as sleep, ct as throwIfAborted, dt as zeroSpend, et as mapWithConcurrency, ft as zeroTokenUsage, gt as withBudgetResources, it as roundBoxMinutes, lt as unmeteredSpend, nt as randomSuffix, ot as stringifySafe, pt as addResourceSpend, q as cloneTokenUsage, rt as randomUuid, st as throwAbort, tt as promptCacheTokenClasses, ut as withTimeout, xt as ROOT_DEADLINE_REASON } from "./workspace-streams-8ALHaZzx.js";
 import { t as runTaskQueue } from "./task-queue-DbpZAp6C.js";
@@ -5587,12 +5587,11 @@ function causedByPartialFailure(error) {
 	return causeChain(error).some((cause) => cause instanceof Error && errorProperty(cause, "name") === "PartialFailureError");
 }
 /**
-* The pending invocation a failure left, when abandoning it is the resolution: the provider
-* answered and could not resolve the execution (`unobservable`), or a nested manager's recovery
-* could not be rebuilt (`nested-recovery`). A lost transport waits for the provider instead, in
-* the outage window: abandoning during a provider outage would start a second execution beside
-* one that may still run. A request refused before it ran has nothing to abandon: a capacity
-* refusal pauses and any other refusal is terminal. A contract violation stays terminal (#1204).
+* The pending invocation a failure left, when abandoning it is the resolution: the provider could
+* not resolve the execution (`unobservable`), or a nested manager's recovery could not be rebuilt
+* (`nested-recovery`). A lost transport waits in the outage window instead, and a capacity refusal
+* pauses, so neither starts a second execution beside one that may still run. A request refused
+* before it ran has nothing to abandon. A contract violation stays terminal (#1204).
 */
 function abandonablePending(error) {
 	return error instanceof RetainedExecutionPendingError && (error.pendingCause === "unobservable" || error.pendingCause === "nested-recovery") ? error : void 0;
@@ -5621,10 +5620,8 @@ const isContentFilterRefusal = (error) => causeChain(error).some((cause) => caus
 /**
 * A driver's harness turn ran to its terminal result, and that result reported failure.
 *
-* A provider executor reports a failed turn as a returned outcome, not a thrown error, so without
-* this error a failed turn reads as a completed drive and never reaches the retry decision.
-* A 53-minute turn ended `status code 524`, and another ended `Invalid API key` after a platform
-* key expired mid-turn. A new turn succeeds in both cases.
+* A provider executor returns a failed turn as an outcome; without this error it reads as a
+* completed drive and never reaches the retry decision (a turn ended `status code 524`).
 *
 * `errorCode` is the provider's machine code when it reported one. The classifier reads the code;
 * text decides only a printed capacity code and a content-filter refusal, which have none.
@@ -5680,8 +5677,8 @@ function isDispatchExecutionChanged(value) {
 */
 function upstreamUnavailableSignal(error) {
 	if (undispatchedCredentialExit(error) !== void 0) return "credential-unavailable";
-	const admission = retainedAdmissionCause(error);
-	if (admission !== void 0) return upstreamUnavailableSignal(admission);
+	const refusal = retainedAdmissionCause(error) ?? reconciliationCapacityRefusal(error);
+	if (refusal !== void 0) return upstreamUnavailableSignal(refusal);
 	if (!(error instanceof Error)) return void 0;
 	if (isCredentialRefusal(error)) return void 0;
 	if (isProviderSchemaRejection(error)) return void 0;
@@ -5698,11 +5695,19 @@ function upstreamUnavailableSignal(error) {
 	return (harness ? subscriptionUsageLimitSignal(failure) : void 0) ?? unavailableSignalOfFailure(failure);
 }
 /**
-* An error's own `code` field, read without trusting its getter. A provider SDK names a capacity
-* refusal with the router's code when no HTTP response exists to carry a status:
-* agent-provider-tangle's `TangleCredentialCapacityError` (`provider_quota_exhausted`,
-* `upstream_unavailable`) when the subscription account owner has no account with room.
+* The capacity refusal an admitted execution's reconciliation met: a cause with an upstream
+* capacity code or HTTP 429. The execution is unresolved, not failed, so the driver pauses and
+* reconciles it again, never abandoning it; a contract violation stays terminal (#1204).
+* magnetar-rust-sandbox-20261102a's managers met `TangleCredentialCapacityError: HTTP 429` on
+* 1,407 reconciliations, each classed transient.
 */
+function reconciliationCapacityRefusal(error) {
+	if (!(error instanceof RetainedExecutionPendingError) || error.phase !== "execution") return void 0;
+	if (error.pendingCause !== "unobservable" && error.pendingCause !== "transport") return void 0;
+	return causeChain(error.cause).find((cause) => cause instanceof Error && (UNAVAILABLE_CODES.has(ownCode(cause)?.toLowerCase() ?? "") || errorHttpStatus(cause) === 429));
+}
+/** An error's own `code` field, read without trusting its getter: agent-provider-tangle's
+*  `TangleCredentialCapacityError` carries the router's code even with no HTTP status. */
 function ownCode(error) {
 	try {
 		const code = Reflect.get(error, "code");
@@ -5789,19 +5794,10 @@ function retainedAdmissionCause(error) {
 	}
 }
 /**
-* A foreign error that still carries an HTTP status is a refusal we can read.
-*
-* A provider SDK throws its own error classes, so an environment `create` that the platform
-* refused arrives here as neither a `BackendTransportError` nor an `AgentEvalError`, and the
-* default sends it to `transient`. A Tangle Sandbox create refused
-* `HTTP 400 {"code":"CONFIG_ERROR"}` for a key whose budget was fully reserved retried 14-22
-* times per node while the run showed a durable intent and no other event, so eleven of twelve
-* roots sat for 25 minutes with nothing to diagnose. The status was on the error the whole time.
-*
-* Reading it applies the same rule the transport branch already promises consumers: 408 and 5xx
-* are the upstream having a bad moment, and any other 4xx is a request that will fail identically
-* forever. The capacity statuses were answered before this point. Anything without a plain numeric
-* status keeps the historical default.
+* A foreign error's HTTP status, read by the transport branch's rule: 408 and 5xx are a bad
+* moment, any other 4xx fails identically forever. A provider SDK's own classes reach here: a
+* Sandbox create refused `HTTP 400 {"code":"CONFIG_ERROR"}` for a fully reserved key was retried
+* 14-22 times per node as transient. Capacity statuses were answered before this point.
 */
 function foreignHttpStatusVerdict(error) {
 	if (!(error instanceof Error)) return void 0;
@@ -8807,24 +8803,21 @@ function stringValue(value) {
 const RETAINED_AWAITING_RESULT_AFTER_MS = 48e4;
 const RETAINED_STATUS_READ_MS = 6e4;
 const RETAINED_OBSERVATION_BATCH_EVENTS = 1024;
-/**
-* After its exact result, a stream that still owes its terminal frame keeps reading only while
-* each frame arrives within this long of the result or the last frame.
-* A provider sends a turn's last frames and its result on two connections, and a burst that
-* straddles the result is read whole.
-*/
+/** After its exact result, a stream owing its terminal frame reads on while each frame comes this
+*  soon after the result or the last frame: a provider sends the two on separate connections. */
 const RETAINED_TAIL_FLOW_MS = 100;
 /** Why the event stream stopped short, as bounded redacted text for the settlement reason. */
-function observationFailureText(failure) {
-	const error = failure.error;
-	return String(defaultRedactor(error instanceof Error ? error.message : String(error))).slice(0, 2048);
+function observationFailureText({ error }) {
+	const text = error instanceof Error ? error.message : String(error);
+	return String(defaultRedactor(text)).slice(0, 2048);
 }
 /** A result refused `provider_quota_exhausted` is the ended run's failed result, not one to reconcile. */
 function exactQuotaRefusal(error) {
 	try {
 		const refusal = causeChain(error).find((cause) => Reflect.get(cause, "name") === "TangleCredentialCapacityError" && Reflect.get(cause, "code") === "provider_quota_exhausted");
-		const resetAt = refusal && Reflect.get(refusal, "resetAt");
-		return refusal === void 0 ? void 0 : {
+		if (refusal === void 0) return void 0;
+		const resetAt = Reflect.get(refusal, "resetAt");
+		return {
 			text: "",
 			success: false,
 			error: `Subscription account capacity is unavailable${typeof resetAt === "string" ? ` until ${resetAt}` : ""}`,
@@ -8839,8 +8832,10 @@ function exactQuotaRefusal(error) {
 var RetainedObservation = class {
 	handle;
 	signal;
+	position;
 	failure;
 	lastReplayPosition;
+	resumedFrom;
 	sawTerminal = false;
 	lastObservedAt = 0;
 	silenceHandledAt;
@@ -8849,21 +8844,25 @@ var RetainedObservation = class {
 	observedFrames = 0;
 	framesAfterResult = 0;
 	exactWakers = /* @__PURE__ */ new Set();
-	exactWatched = false;
 	seenEvents = /* @__PURE__ */ new Map();
 	pendingRead;
-	constructor(handle, signal) {
+	constructor(handle, signal, position) {
 		this.handle = handle;
 		this.signal = signal;
+		this.position = position;
+		const observed = position?.observed;
+		if (observed?.executionId === handle.controlRef.executionId) this.lastReplayPosition = this.resumedFrom = observed.replayPosition;
 	}
 	/** Stream the provider's frames, resume once after a break, then yield the exact result. */
 	async *observe(session) {
 		this.lastObservedAt = Date.now();
-		if (!(yield* this.drain(session)) && !this.sawTerminal && this.lastReplayPosition !== void 0) {
+		if (!(yield* this.drain(session, this.resumedFrom)) && !this.sawTerminal && this.lastReplayPosition !== void 0) {
 			const firstFailure = this.failure;
 			this.failure = void 0;
 			if (!(yield* this.drain(session, this.lastReplayPosition))) this.failure = firstFailure;
 		}
+		const resumed = this.resumedFrom && `retained provider stream resumed after ${this.resumedFrom}`;
+		if (resumed) this.failure ??= { error: new Error(resumed) };
 		if (!this.sawTerminal && this.failure === void 0) this.failure = { error: /* @__PURE__ */ new Error("retained provider stream did not yield a terminal event") };
 		if (!this.sawTerminal && !this.exactResultSettled && this.silenceHandledAt === void 0) yield this.awaitingResult(Date.now());
 		while (!await this.exactOrQuiet()) await this.confirmRunLive(session);
@@ -8940,6 +8939,7 @@ var RetainedObservation = class {
 			const settle = () => {
 				if (this.observedFrames === 0) this.lastObservedAt = Date.now();
 				this.exactResultSettled = true;
+				for (const wake of [...this.exactWakers]) wake();
 			};
 			this.exactResult.then(settle, settle);
 		}
@@ -8951,16 +8951,8 @@ var RetainedObservation = class {
 			return () => {};
 		}
 		this.exactWakers.add(waker);
-		if (!this.exactWatched) {
-			this.exactWatched = true;
-			const fire = () => {
-				for (const wake of [...this.exactWakers]) wake();
-			};
-			this.readExactResult().then(fire, fire);
-		}
-		return () => {
-			this.exactWakers.delete(waker);
-		};
+		this.readExactResult();
+		return () => this.exactWakers.delete(waker);
 	}
 	awaitingResult(since) {
 		this.silenceHandledAt = Date.now();
@@ -8977,10 +8969,7 @@ var RetainedObservation = class {
 				wake = setImmediate(() => {
 					const close = () => {
 						const flowing = this.sawTerminal ? 0 : RETAINED_TAIL_FLOW_MS - (Date.now() - this.lastObservedAt);
-						if (flowing <= 0) {
-							resolve({ kind: "exact-result" });
-							return;
-						}
+						if (flowing <= 0) return resolve({ kind: "exact-result" });
 						grace = setTimeout(() => {
 							wake = setImmediate(() => resolve({ kind: "exact-result" }));
 						}, flowing);
@@ -9037,8 +9026,15 @@ var RetainedObservation = class {
 			this.seenEvents.set(eventId, digest);
 		}
 		this.lastObservedAt = Date.now();
-		if (identity.cursor !== void 0) this.lastReplayPosition = identity.cursor;
-		else if (eventId !== void 0) this.lastReplayPosition = eventId;
+		const replayPosition = identity.cursor ?? eventId;
+		if (replayPosition !== void 0) {
+			this.lastReplayPosition = replayPosition;
+			const { executionId } = this.handle.controlRef;
+			this.position?.onObserved?.({
+				executionId,
+				replayPosition
+			});
+		}
 		if (isTerminalEnvironmentEvent(event)) this.sawTerminal = true;
 		this.readExactResult();
 		return true;
@@ -9065,7 +9061,7 @@ var RetainedObservation = class {
 					this.failure ??= { error: /* @__PURE__ */ new Error(`retained provider stream sent ${RETAINED_OBSERVATION_BATCH_EVENTS} frames after its exact result; the rest were not read`) };
 					break;
 				}
-				if (this.observedFrames > 0 && this.observedFrames % RETAINED_OBSERVATION_BATCH_EVENTS === 0) await awaitAbortable(new Promise((resolve) => setImmediate(resolve)), this.signal);
+				if (this.observedFrames % RETAINED_OBSERVATION_BATCH_EVENTS === 0 && this.observedFrames) await awaitAbortable(new Promise((resolve) => setImmediate(resolve)), this.signal);
 				let observed;
 				try {
 					observed = await this.raceNextRead(iterator);
@@ -9311,7 +9307,7 @@ async function retainedExecution(args, retention, turn, selectedTurn, signal) {
 		const session = exactSession(environment, handle.controlRef).session;
 		return {
 			environment,
-			events: new RetainedObservation(handle, signal).observe(session),
+			events: new RetainedObservation(handle, signal, retention).observe(session),
 			retained: true
 		};
 	} catch (error) {
@@ -17552,4 +17548,4 @@ async function noWinner(settled, rejection) {
 }
 export { DEFAULT_PEER_MAIL_LIMITS as $, promptModelProfileMaterialization as $t, createSandboxForSpec as A, bridgeModelRouteRefusal as At, createRouterTranscript as B, defaultRunCommand as Bt, createExecutor as C, admitContinuationPolicy as Ct, runAgentRounds as D, failedItems as Dt, createSteerableSandboxSession as E, createContinuationKeeper as Et, codeModeArguments as F, harnessUsageIsEmpty as Ft, LEAF_CONTINUATION_TASK as G, terminateProcessTreeAndConfirm as Gt, createAgentEnvironmentProviderRegistry as H, runWorktreeHarness as Ht, codeModeModelOutput as I, readCodexRolloutSession as It, createInPlaceCliExecutor as J, controlProfileMaterialization as Jt, providerAsSandboxClient as K, assertProfileMaterialization as Kt, createCodeModeTools as L, createPushTraceSource as Lt, acquireSandbox as M, ROUTER_PRICE_SOURCE as Mt, TERMINAL_DECISIONS as N, addHarnessUsage as Nt, assertBoxlessPromptOptions as O, isFiniteNumber as Ot, defaultSelectWinner as P, createCodexRolloutStoreReader as Pt, AUTHORITY_MARKERS as Q, promptControlProfileMaterialization as Qt, runCodeMode as R, bridgeRuntimeAttachmentsKey as Rt, captureReusableExecutorConfig as S, CONTINUATIONS_DIR as St, DEFAULT_SANDBOX_STEERING_MAX_TURNS as T, checkVerdictOf as Tt, resolveAgentEnvironmentProvider as U, LOCAL_HARNESSES as Ut, routerBrain as V, runSettledCommand as Vt, providerAsExecutor as W, harnessInvocation as Wt, createInbox as X, fullProfileMaterialization as Xt, INBOX_RECEIPT_KEY as Y, defineProfileMaterializationContract as Yt, failPendingAfter as Z, profileMaterializationAxes$1 as Zt, withDriverExecutor as _, CheckUnavailableError as _t, assertRunParking as a, projectSandboxOutcome as an, peerMailVerbNames as at, createExecutorRegistry as b, mapExecutorResult as bt, sleepScopeWait as c, HarnessTurnFailedError as ct, runFinalizer as d, classifyDriverFailure as dt, renderUnsupported as en, PEER_MAIL_WIRE_KEY as et, runTree as f, isContentFilterRefusal as ft, isDriverSpec as g, preflightPublicCoordination as gt, driverExecutorFactory as h, upstreamUnavailableSignal as ht, RunParkedError as i, worktreeCliProfileMaterialization as in, peerMailTools as it, createSandboxLineage as j, priceTokens as jt, readPromptOptions as k, bridgeAdmissionRefusal as kt, withRunParking as l, abandonablePending as lt, driverChild as m, undispatchedCredentialExit as mt, createSupervisor as n, sandboxProfileMaterialization as nn, createPeerMailbox as nt, bindScopeParkingDrain as o, readSandboxOutcome as on, taskToPrompt$1 as ot, createRootHandle as p, summarizeDriverAttempts as pt, createWorktreeCliExecutor as q, assertProfileMaterializes as qt, assertResumeLimits as r, unsupportedProfileDimensions as rn, isPeerMailEnvelope as rt, readRunParking as s, DriverAttemptsExhaustedError as st, DEFAULT_MAX_DEPTH as t, sandboxActProfileMaterialization as tn, claimsAuthority as tt, bestDelivered as u, causedByPartialFailure as ut, InMemoryResultBlobStore as v, gateFactoryOnDeliverable as vt, snapshotExecutorConfig as w, bestComposite as wt, bindReusableExecutorExecutionId as x, verdictFromJudgeScore as xt, InMemorySpawnJournal as y, gateOnDeliverable as yt, toolResultText as z, bridgeStopSignalKey as zt };
 
-//# sourceMappingURL=supervisor-BDnqTl_R.js.map
+//# sourceMappingURL=supervisor-BQz8lkcd.js.map