@tangle-network/agent-runtime 3.0.42 → 4.0.0

package/dist/{scope-D04GkJ6P.js → scope-CJ7xtrs8.js}

@@ -1,6 +1,6 @@
 import { c as RetainedInteractiveAdmissionError, d as RetainedRunDispatchBindingError, f as RuntimeRunStateError, l as RetainedInteractiveBindingError, m as ValidationError, r as BackendTransportError, u as RetainedRunAdmissionError } from "./errors-AzSuGI23.js";
 import { $ as isAsyncIterable, Ct as boundedChildDeadlineAt, Dt as teardownExecutor, Et as singleFlightTeardown, F as deepFreezeCandidate, G as chargedTokens, H as abortError, K as cloneSpend, St as armDeadlineTimer, U as addSpend, W as addTokenUsage, X as fnv1a32Hex, Y as errorMessage, Z as hasCompleteCacheBreakdown, a as verifyAgentCandidateWorkspaceArtifacts, at as sleep, dt as zeroSpend, ft as zeroTokenUsage, g as workspaceLimits, gt as withBudgetResources, h as verifyAgentCandidateWorkspaceArchive, ht as resourceTelemetry, i as readAgentCandidateWorkspaceArtifactFiles, j as verifiedArtifactChunks, k as verifyWorkspaceSnapshotArtifacts, m as safeArchivePath, mt as assertResources, o as verifyAgentCandidateWorkspaceTree, pt as addResourceSpend, q as cloneTokenUsage, tt as promptCacheTokenClasses, vt as CHILD_DEADLINE_REASON, wt as checkInIdleMs, z as sha256Bytes$1 } from "./workspace-streams-8ALHaZzx.js";
-import { _ as errorText, a as readCommittedJsonLines, b as resolveRedactor, c as appendCommittedJsonLine, d as detachedSnapshot, f as shareParsedStrings, g as errorProperty, l as sha256, m as errMessage, p as causeChain, r as prepareJsonlAppend, s as withJsonlFileLock, t as isNoEntError, v as defaultRedactor } from "./jsonl-file-CbxMVnUj.js";
+import { _ as errorText, a as readCommittedJsonLines, b as resolveRedactor, c as appendCommittedJsonLine, d as detachedSnapshot, f as shareParsedStrings, g as errorProperty, l as sha256, m as errMessage, p as causeChain, r as prepareJsonlAppend, s as withJsonlFileLock, t as isNoEntError, v as defaultRedactor } from "./jsonl-file-CvPuwM0a.js";
 import { t as assertExecutableAgentProfile } from "./model-policy-JOcg3NRs.js";
 import { a as writeAtomicDurableFile, n as assertNoSymlinkDescendant, o as captureRunWriteContext, r as publishExclusiveDurableFile, s as fenceRunWrite, t as appendDurableFile } from "./durable-file-DstVeHcj.js";
 import { a as withPursuitContext, i as notifyRuntimeHookEvent } from "./runtime-hooks-CsW2pfFk.js";
@@ -2473,6 +2473,7 @@ const PLATFORM_FAILURE_CODES = new Set([
 	"provider_quota_exceeded",
 	"provider_quota_exhausted",
 	"buffer.overflow",
+	"EXECUTION_INTERRUPTED",
 	"TIMEOUT",
 	"ECONNRESET",
 	"ECONNREFUSED",
@@ -2483,7 +2484,6 @@ const PLATFORM_FAILURE_CODES = new Set([
 const PLATFORM_FAILURE_MESSAGES = [
 	/^terminated$/u,
 	/Execution exceeded its time limit/u,
-	/Execution interrupted: the agent runtime restarted/u,
 	/Platform key[- ]verification/u,
 	/Platform key delegation failed/u,
 	/Bad Gateway/iu,
@@ -2762,9 +2762,14 @@ const UNAVAILABLE_STATUSES = /* @__PURE__ */ new Set([
 */
 function unavailableSignalInText(text) {
 	for (const token of text.toLowerCase().matchAll(/[a-z_]+/gu)) if (UNAVAILABLE_CODES.has(token[0])) return token[0];
-	const status = text.match(/\bstatus code (\d{3})\b/u)?.[1];
-	return status !== void 0 && UNAVAILABLE_STATUSES.has(Number(status)) ? `http-${status}` : void 0;
+	const status = printedStatus(text);
+	return status !== void 0 && UNAVAILABLE_STATUSES.has(status) ? `http-${status}` : void 0;
 }
+/** The HTTP status a harness printed in its `status code <n>` framing, if any. */
+const printedStatus = (text) => {
+	const status = text.match(/\bstatus code (\d{3})\b/u)?.[1];
+	return status === void 0 ? void 0 : Number(status);
+};
 /**
 * Sandbox's 409 `NO_HOST_FITS_SHAPE` for a shape that fits its host's ceiling: no exceeded
 * dimension, only `its room is held placeable on <sku>`. It is sent by mistake for "no room now"
@@ -2806,25 +2811,31 @@ const MAX_RESET_HOLD_MS = 216e5;
 /** How often a refusal whose reset is beyond {@link MAX_RESET_HOLD_MS} is probed again. */
 const FAR_RESET_PROBE_MS = 36e5;
 /**
-* When a refusal says its quota resets, as epoch ms, or `undefined` when it names no usable time.
-* The Z.ai Coding Plan's opencode refusal names one in Beijing time with no zone:
-* `Usage limit reached for 5 hour. Your limit will reset at 2026-10-18 15:17:33`. On Discovery run
-* magnetar-rust-20261018b, 219 of 324 driver attempts ended on it between 06:04Z and 22:18Z, and
-* the last refusal came at 22:18Z against `reset at 2026-10-19 06:18:14`, which is 22:18:14Z at
-* +08:00. A time with its own zone is read as written. A time in the past is no reset time: the
-* caller keeps its doubling pause. A time more than MAX_RESET_HOLD_MS ahead is held for only
-* FAR_RESET_PROBE_MS at a time, so a misread zone cannot hold a seat for a day, yet the spent seat
-* is not asked again every 5 minutes: on magnetar-rust-20261019c a reset beyond 6 h drew about 12
-* attempts an hour against the refusing seat.
+* When a capacity refusal says its quota resets, as epoch ms: the `resetAt` field (ISO string or
+* epoch ms) on the error or a cause, as agent-provider-tangle's `TangleCredentialCapacityError`
+* carries it. Text is never read: zro-game-20261104b's children re-probed every 183 s against a
+* seat whose structured reset was 2026-11-10T12:00Z, because only the message was parsed.
+*/
+function reportedResetAt(error) {
+	for (const cause of causeChain(error)) {
+		let value;
+		try {
+			value = Reflect.get(cause, "resetAt");
+		} catch {
+			continue;
+		}
+		const at = typeof value === "number" ? value : typeof value === "string" ? Date.parse(value) : NaN;
+		if (Number.isFinite(at)) return at;
+	}
+}
+/**
+* Until when a reported reset holds a pause, or `undefined` for none (absent or past: the caller
+* keeps its doubling pause). A reset more than MAX_RESET_HOLD_MS ahead is held FAR_RESET_PROBE_MS
+* at a time; on magnetar-rust-20261019c a far reset drew about 12 attempts an hour.
 */
-function unavailableResumeAt(text, nowMs) {
-	const match = text.match(/\breset at (\d{4}-\d{2}-\d{2})[ T](\d{2}:\d{2}:\d{2})(?:\.\d+)?(Z|[+-]\d{2}:?\d{2})?/u);
-	if (match === null) return void 0;
-	const zone = match[3] ?? (/Usage limit reached for \d+ hour/u.test(text) ? "+08:00" : void 0);
-	if (zone === void 0) return void 0;
-	const at = Date.parse(`${match[1]}T${match[2]}${zone.length === 5 ? `${zone.slice(0, 3)}:${zone.slice(3)}` : zone}`);
-	if (!Number.isFinite(at) || at <= nowMs) return void 0;
-	return at - nowMs > MAX_RESET_HOLD_MS ? nowMs + FAR_RESET_PROBE_MS : at;
+function unavailableResumeAt(resetAt, nowMs) {
+	if (resetAt === void 0 || resetAt <= nowMs) return void 0;
+	return resetAt - nowMs > MAX_RESET_HOLD_MS ? nowMs + FAR_RESET_PROBE_MS : resetAt;
 }
 /**
 * Spread a wait over `[ms / 2, ms]`. Every driver a Platform restart cut off fails within the same
@@ -3769,12 +3780,17 @@ function providerAttemptEvidence(model) {
 	});
 }
 // src/runtime/supervise/seat-chain.ts
-var SeatChainExhaustedError = class extends Error {
+/** How often a pause with no known reset asks again, the account cache's cadence. */
+const SEAT_RECHECK_MS = 12e4;
+/** No seat can start before `resumeAt`: the chain is exhausted, or `detail` says why not. */
+var SeatPauseError = class extends Error {
 	resumeAt;
-	constructor(resumeAt) {
-		super(`authored subscription seat chain exhausted; resume at ${resumeAt}`);
-		this.name = "SeatChainExhaustedError";
+	detail;
+	constructor(resumeAt, detail) {
+		super(`${detail ?? "authored subscription seat chain exhausted"}; resume at ${resumeAt}`);
+		this.name = "SeatPauseError";
 		this.resumeAt = resumeAt;
+		this.detail = detail;
 	}
 };
 /** One logical node's durable chain. The spawn journal is the sole transition authority. */
@@ -3890,8 +3906,8 @@ var SeatChain = class {
 			}
 			return active;
 		}
-		const recheckAt = Math.max(earliestReset ?? 0, this.now() + 12e4);
-		throw new SeatChainExhaustedError(new Date(recheckAt).toISOString());
+		const recheckAt = Math.max(earliestReset ?? 0, this.now() + SEAT_RECHECK_MS);
+		throw new SeatPauseError(new Date(recheckAt).toISOString());
 	}
 	async close(reason) {
 		const events = (await this.journal.loadTree(this.rootId) ?? []).filter((event) => event.kind === "seat-segment" && event.id === this.nodeId);
@@ -8597,6 +8613,7 @@ const outsideKinds = /* @__PURE__ */ new Set([
 	"environment-teardown",
 	"environment-terminal",
 	"workspace-checkpoint-requested",
+	"workspace-checkpoint-refused",
 	"workspace-checkpoint",
 	"workspace-checkpoint-fork-requested",
 	"workspace-checkpoint-fork-ready",
@@ -9057,16 +9074,17 @@ function pendingCheckpoints(events, state) {
 // src/runtime/supervise/retained-owner-checkpoint-capture.ts
 /**
 * Delete checkpoints, each only after its files are captured into the run's content-addressed
-* store; a checkpoint no capture holds is kept, and the cleanup record says why. Only the
+* store; a checkpoint no capture holds is kept, and the cleanup record says why. `uncapturable`
+* deletes one anyway when no capture port exists: the record then names no digest. Only the
 * source-scoped handle can fork a checkpoint and attest its deletion, including after its source
 * is lost. `parent` cancels the captures (the owner's scope during rotation); each provider
 * operation also has its own bound.
 */
-async function cleanCheckpoints(state, branching, checkpoints, events, parent) {
+async function cleanCheckpoints(state, branching, checkpoints, events, parent, uncapturable = false) {
 	const unconfirmed = [];
 	const refused = [];
 	for (const event of checkpoints) {
-		const captured = await captureBeforeCleanup(state, branching, event, events, parent);
+		const captured = await captureBeforeCleanup(state, branching, event, events, parent, uncapturable);
 		if ("reason" in captured) {
 			state.captureRefused ??= /* @__PURE__ */ new Set();
 			state.captureRefused.add(event.checkpoint.checkpointId);
@@ -9110,7 +9128,7 @@ async function cleanCheckpoints(state, branching, checkpoints, events, parent) {
 			environmentId: event.environmentId,
 			checkpointId: event.checkpoint.checkpointId,
 			confirmed,
-			capturedDigest: captured.digest,
+			...captured.digest === void 0 ? {} : { capturedDigest: captured.digest },
 			seq: state.nextSequence(),
 			at: new Date(state.args.now()).toISOString()
 		});
@@ -9128,7 +9146,7 @@ async function cleanCheckpoints(state, branching, checkpoints, events, parent) {
 * destroyed once the capture is journaled, so neither a failure nor a crash leaves it running
 * unrecorded.
 */
-async function captureBeforeCleanup(state, branching, event, events, parent) {
+async function captureBeforeCleanup(state, branching, event, events, parent, uncapturable = false) {
 	const { args } = state;
 	const checkpointId = event.checkpoint.checkpointId;
 	const recorded = events.find((prior) => prior.kind === "workspace-checkpoint-capture" && prior.id === args.nodeId && prior.provider === event.provider && prior.environmentId === event.environmentId && prior.checkpointId === checkpointId);
@@ -9139,7 +9157,7 @@ async function captureBeforeCleanup(state, branching, event, events, parent) {
 		needsSource
 	});
 	const capture = state.checkpointCapture;
-	if (capture?.port.captureCheckpoint === void 0) return refuse("no checkpoint capture: the owner backend has no captureCheckpoint", false);
+	if (capture?.port.captureCheckpoint === void 0) return uncapturable ? {} : refuse("no checkpoint capture: the owner backend has no captureCheckpoint", false);
 	const provider = state.provider;
 	if (provider?.get === void 0) return refuse("the provider cannot reconstruct a fork of the checkpoint", false);
 	const get = provider.get.bind(provider);
@@ -9334,8 +9352,8 @@ function scopeRetainedOwnerJournalRoot(scope) {
 }
 /**
 * Bind cleanup before replay can return an already accepted owner result. `checkpointCapture` is
-* where each checkpoint's files are stored before the checkpoint is deleted; without it, no
-* checkpoint of this owner is deleted.
+* where each checkpoint's files are stored before the checkpoint is deleted; without it, a
+* checkpoint of this owner is deleted only when a provider refuses a newer one.
 */
 function bindScopeRetainedOwnerProvider(scope, provider, checkpointCapture) {
 	const state = owners.get(scope);
@@ -9408,6 +9426,23 @@ async function checkpointOwnerWorkspace(scope, state) {
 		state.checkpointsUnavailable = `environment ${environment.id} offers no durable checkpoint`;
 		return;
 	}
+	const requestOne = () => requestCheckpoint(scope, state, provider.name, environment, branching, source, signal);
+	if (!await requestOne() && (!await deleteOldestUncapturable(state, branching, environment.id, signal) || !await requestOne())) return;
+	const events = await args.journal.loadTree(args.rootId) ?? [];
+	const owned = pendingCheckpoints(events, state).filter((event) => event.environmentId === environment.id && state.captureRefused?.has(event.checkpoint.checkpointId) !== true);
+	const rotation = new AbortController();
+	state.rotationCaptures = rotation;
+	const timer = setTimeout(() => rotation.abort(/* @__PURE__ */ new Error(`the rotation's ${WORKSPACE_CHECKPOINT_ROTATION_CAPTURES_MS} ms for checkpoint captures ran out; checkpoint kept`)), WORKSPACE_CHECKPOINT_ROTATION_CAPTURES_MS);
+	try {
+		await cleanCheckpoints(state, branching, owned.slice(0, -2), events, AbortSignal.any([scope.signal, rotation.signal]));
+	} finally {
+		clearTimeout(timer);
+		if (state.rotationCaptures === rotation) delete state.rotationCaptures;
+	}
+}
+/** Ask for one checkpoint and journal the answer. True when the journal holds the checkpoint. */
+async function requestCheckpoint(scope, state, providerName, environment, branching, source, signal) {
+	const { args } = state;
 	const seq = state.nextSequence();
 	const at = new Date(args.now()).toISOString();
 	const name = `owner-checkpoint-${seq}`;
@@ -9434,7 +9469,7 @@ async function checkpointOwnerWorkspace(scope, state) {
 	await args.journal.appendEvent(args.rootId, {
 		kind: "workspace-checkpoint-requested",
 		id: args.nodeId,
-		provider: provider.name,
+		provider: providerName,
 		environmentId: environment.id,
 		request,
 		...marked ? { marker } : {},
@@ -9442,30 +9477,46 @@ async function checkpointOwnerWorkspace(scope, state) {
 		at
 	});
 	const result = await runAbortable(() => branching.checkpoint(request, { signal }), signal, "retained owner checkpoint timed out");
-	if (result.status !== "created" && result.status !== "replayed") return;
-	if (!workspaceCheckpointResultMatchesRequest(request, result)) return;
+	if (result.status !== "created" && result.status !== "replayed") {
+		await args.journal.appendEvent(args.rootId, {
+			kind: "workspace-checkpoint-refused",
+			id: args.nodeId,
+			provider: providerName,
+			environmentId: environment.id,
+			idempotencyKey: request.idempotencyKey,
+			message: errorText("message" in result ? result.message : result.status),
+			seq: state.nextSequence(),
+			at
+		});
+		return false;
+	}
+	if (!workspaceCheckpointResultMatchesRequest(request, result)) return false;
 	scope.signal.throwIfAborted();
 	await args.journal.appendEvent(args.rootId, {
 		kind: "workspace-checkpoint",
 		id: args.nodeId,
-		provider: provider.name,
+		provider: providerName,
 		environmentId: environment.id,
 		checkpoint: result.checkpoint,
 		...marked ? { marker } : {},
 		seq: state.nextSequence(),
 		at
 	});
-	const events = await args.journal.loadTree(args.rootId) ?? [];
-	const owned = pendingCheckpoints(events, state).filter((event) => event.environmentId === environment.id && state.captureRefused?.has(event.checkpoint.checkpointId) !== true);
-	const rotation = new AbortController();
-	state.rotationCaptures = rotation;
-	const timer = setTimeout(() => rotation.abort(/* @__PURE__ */ new Error(`the rotation's ${WORKSPACE_CHECKPOINT_ROTATION_CAPTURES_MS} ms for checkpoint captures ran out; checkpoint kept`)), WORKSPACE_CHECKPOINT_ROTATION_CAPTURES_MS);
-	try {
-		await cleanCheckpoints(state, branching, owned.slice(0, -2), events, AbortSignal.any([scope.signal, rotation.signal]));
-	} finally {
-		clearTimeout(timer);
-		if (state.rotationCaptures === rotation) delete state.rotationCaptures;
-	}
+	return true;
+}
+/**
+* Delete this environment's oldest checkpoint beyond {@link WORKSPACE_CHECKPOINTS_KEPT} when no
+* capture could ever hold its files, to make room for a newer one. Keeping them all stopped the
+* restore point instead: zro-game-20261104b's box stored 25 of its 61 requests, its plan's limit,
+* and its last restore point was 7 h old. A backend that captures deletes through its rotation.
+*/
+async function deleteOldestUncapturable(state, branching, environmentId, signal) {
+	if (state.checkpointCapture?.port.captureCheckpoint !== void 0) return false;
+	const events = await state.args.journal.loadTree(state.args.rootId) ?? [];
+	const oldest = pendingCheckpoints(events, state).filter((event) => event.environmentId === environmentId).slice(0, -2).slice(0, 1);
+	if (oldest.length === 0) return false;
+	const { unconfirmed } = await cleanCheckpoints(state, branching, oldest, events, signal, true);
+	return unconfirmed.length === 0;
 }
 /**
 * The owner's workspace-capture journal writers. A turn's capture starting cuts short the
@@ -10950,27 +11001,28 @@ function scopeRetainedOwnerResourceReader(scope) {
 }
 // src/runtime/supervise/retained-owner-seat-switch.ts
 /** A committed turn is the seat boundary. Keep its native home for a same-harness provider
-* continuation; only a provider/harness change needs a new environment. */
+* continuation; only a provider/harness change needs a new environment, and a checkpoint of the
+* old one, whose time it returns. */
 async function prepareScopeRetainedOwnerSeatSwitch(scope, mode) {
 	const state = owners.get(scope);
 	if (!state?.acceptedRef || !state.acceptedConsumed) throw new ValidationError("seat switch requires a committed owner turn");
 	const accepted = state.acceptedRef;
 	const owned = await checkpointOwner(scope, state);
+	if (mode === "same-environment") return void 0;
 	const acceptedIndex = owned.findIndex((event) => event.kind === "execution-result" && event.seq === accepted.seq && event.outRef === accepted.outRef);
 	if (acceptedIndex < 0) throw new ValidationError("seat switch has no committed result in its journal");
 	const source = owned.slice(0, acceptedIndex).reverse().find((event) => event.kind === "execution-admitted" && event.admission.phase === "environment");
 	const sourceEnvironmentId = source?.kind === "execution-admitted" && source.admission.phase === "environment" ? source.admission.environmentId : void 0;
-	const checkpoint = owned.slice(acceptedIndex + 1).reverse().find((event) => event.kind === "workspace-checkpoint" && event.environmentId === sourceEnvironmentId);
-	if (checkpoint?.kind !== "workspace-checkpoint") throw new ValidationError("seat switch requires a checkpoint of its committed source");
-	if (mode === "replace-environment") {
-		await retireCheckpointed(scope, state, owned, checkpoint, "seat changed");
-		state.forceNewSession = true;
+	const since = owned.slice(acceptedIndex + 1).reverse();
+	const checkpoint = since.find((event) => event.kind === "workspace-checkpoint" && event.environmentId === sourceEnvironmentId);
+	if (checkpoint?.kind !== "workspace-checkpoint") {
+		const refusal = since.find((event) => event.kind === "workspace-checkpoint-refused");
+		const why = state.checkpointsUnavailable ?? (refusal?.kind === "workspace-checkpoint-refused" ? refusal.message : "none was taken");
+		throw new ValidationError(`no checkpoint of its committed source: ${why}`);
 	}
-	return {
-		checkpointAt: checkpoint.at,
-		checkpointId: checkpoint.checkpoint.checkpointId,
-		sourceEnvironmentId: checkpoint.environmentId
-	};
+	await retireCheckpointed(scope, state, owned, checkpoint, "seat changed");
+	state.forceNewSession = true;
+	return checkpoint.at;
 }
 /** An exhausted seat chain pauses its manager until `resumeAt` with no turn to run: on
 * magnetar-rust-sandbox-20261031b (Runtime 3.0.5) a resume paused four managers until 11-04 with
@@ -16141,7 +16193,7 @@ var ScopeSpawner = class {
 		const { recovery, opts } = request;
 		const child = this.admit(request, reuse, ticket);
 		const { id, continuing } = child;
-		const controller = this.armChildAbort(child, cleanup);
+		const controller = this.armChildAbort(child, cleanup, permit);
 		const deferredOwner = {};
 		const workerTrace = args.workerTrace?.(args.parentId);
 		const { recoveryReady, markRecoveryReady } = recoveryReadyGate(recovery, budgetGranted);
@@ -16262,20 +16314,24 @@ var ScopeSpawner = class {
 	}
 	/**
 	* The child's abort chains off this scope's signal AND its own handle.abort() or bounded
-	* deadline; aborting mid-acquire cascades into acquireSandbox's find-by-name reap.
+	* deadline; aborting mid-acquire cascades into acquireSandbox's find-by-name reap. A live child's
+	* time box counts from its grant, not its spawn: queue time is not its time (zro-game-20261104a
+	* s15-s20 expired queued, execution-did-not-start). A recovered child keeps its journaled grant.
 	*/
-	armChildAbort(child, cleanup) {
+	armChildAbort(child, cleanup, permit) {
 		const { args, now } = this.deps;
 		const { id, childDeadlineAtMs } = child;
 		const controller = new AbortController();
 		cleanup.cascadeAbort = () => controller.abort(args.signal.reason);
 		if (args.signal.aborted) controller.abort(args.signal.reason);
 		else args.signal.addEventListener("abort", cleanup.cascadeAbort, { once: true });
-		if (childDeadlineAtMs !== void 0) {
-			const runDeadlineAtMs = args.depth === 0 ? args.pool.readout().deadlineMs : 0;
-			const timeBox = !(runDeadlineAtMs > 0 && childDeadlineAtMs >= runDeadlineAtMs);
+		const runDeadlineAtMs = args.depth === 0 ? args.pool.readout().deadlineMs : 0;
+		let cleared = false;
+		const arm = (deadlineAtMs) => {
+			if (deadlineAtMs === void 0 || cleared) return;
+			const timeBox = !(runDeadlineAtMs > 0 && deadlineAtMs >= runDeadlineAtMs);
 			let clearCheckIn;
-			const clearTimer = armDeadlineTimer(Math.max(0, childDeadlineAtMs - now()), () => {
+			const clearTimer = armDeadlineTimer(Math.max(0, deadlineAtMs - now()), () => {
 				clearCheckIn = timeBox ? this.deps.checkInAtTimeBox(id, controller) : void 0;
 				if (clearCheckIn === void 0) controller.abort(CHILD_DEADLINE_REASON);
 			});
@@ -16283,6 +16339,13 @@ var ScopeSpawner = class {
 				clearTimer();
 				clearCheckIn?.();
 			};
+		};
+		if (child.recovery !== void 0 || child.opts.budget.deadlineMs === void 0) arm(childDeadlineAtMs);
+		else {
+			cleanup.clearChildDeadline = () => {
+				cleared = true;
+			};
+			permit.ready.then(() => arm(boundedChildDeadlineAt(args.pool.readout().deadlineMs, child.opts.budget.deadlineMs, now())), () => void 0);
 		}
 		return controller;
 	}
@@ -16790,6 +16853,6 @@ async function recoverRetainedChildren(args, children, spawn, next) {
 		throw error;
 	}
 }
-export { deriveNodeExecutionIdentity as $, awaitAbortable$1 as $i, persistHarnessTranscript as $n, DISPATCH_NOT_ADMITTED_CODE as $r, insideCursorNamespace as $t, nestedScopeSeamKey as A, mapSandboxToolEvent as Ai, workerTraceEnv as An, recordRuntimeOwnedProviderDispatchNotStarted as Ar, beginScopeRetainedOwnerDrive as At, beginScopeOwnerAttempt as B, createSandboxUsageLedger as Bi, flatOtelSpan as Bn, unknownMaterializationReceipt as Br, retainedOwnerWorkspaceRetentionSeamKey as Bt, writeWorkerSteerAcknowledgement as C, meterUsageEvent as Ci, nativeCopyDelayMs as Cn, inheritRuntimeOwnedExecutorAttestation as Cr, environmentReader as Ct, isTraceAnalysisStore as D, assertValidBudget as Di, openSlotGroup as Dn, providerAttemptEvidence as Dr, prepareScopeRetainedOwnerTask as Dt, replaySpawnTree as E, spendFromUsageTotals as Ei, createWorkerSlots as En, newExecutionAttemptId as Er, consumeScopeRetainedOwnerResult as Et, recoverRetainedInteractiveRun as F, canonicalStreamEventFromSandboxEvent as Fi, buildLoopOtelSpans as Fn, runtimeOwnedExecutorMaterialization as Fr, scopeRetainedOwnerRestorePoint as Ft, scopeOwnerExecutorNodeContext as G, sandboxEventServedBackend as Gi, sanitizeKnowledgeReadinessReport as Gn, runtimeFlowBrain as Gr, materializeTreeView as Gt, noteScopeOwnerPlannedExecution as H, isSandboxTerminalEvent as Hi, loopEventToOtelSpan as Hn, executableAgentSpecSnapshot as Hr, scopeRetainedOwnerJournalRoot as Ht, startRetainedInteractiveRun as I, extractTransportEventIdentity as Ii, buildLoopSpanNodes as In, runtimeOwnedExecutorProviderEvidence as Ir, noteScopeRetainedOwnerCoordination as It, providerVisibleProfile as J, decodeHarnessUsage as Ji, captureBoundHarnessTranscript as Jn, runtimeFailureCauseSchema as Jr, nestedDriverTreeRoot as Jt, coordinationMcpAlias as K, sandboxTerminalUsageField as Ki, sanitizeRuntimeStreamEvent as Kn, reportedFailureCause as Kr, attestNestedDriverTreeOwner as Kt, FileSpawnJournal as L, assertSandboxServedModel as Li, buildRuntimeEventOtelSpans as Ln, runtimeOwnedPendingExecutorMaterialization as Lr, scopeRetainedOwnerCheckpointing as Lt, attachWorker as M, sandboxOutputMarker as Mi, createPropagatingTraceEmitter as Mn, recordRuntimeOwnedProviderModel as Mr, scopeRetainedOwnerTurnEnded as Mt, readWorkerInteractiveBinding as N, sandboxProgressEvents as Ni, mergeTraceEnv as Nn, runtimeOwnedDriveHarnessProviderEvidence as Nr, assertRetainedOwnerCoordinationRekey as Nt, parseWorkerToolTraceArtifact as O, createSandboxToolPartState as Oi, resolveWorkerSlots as On, recordRuntimeOwnedDriveHarnessProviderEvidence as Or, scopeRetainedOwnerPriorSpend as Ot, reconnectRetainedInteractiveRun as P, terminalTextFromSandboxEvent as Pi, readTraceContextFromEnv as Pn, runtimeOwnedExecutorExecutionBinding as Pr, reconcileScopeRetainedOwnerEnvironment as Pt, assertRecursiveReservationPolicy as Q, assertEventBinding as Qi, harnessTranscriptUnavailable as Qn, DISPATCH_EXECUTION_CHANGED_CODE as Qr, closesCursorSlot as Qt, appendSpawnEvents as R, canonicalSandboxUsageMode as Ri, createOpenInferenceFileExporter as Rn, runtimeOwnedScopeOwnerRuntime as Rr, bindScopeRetainedOwnerEnvironmentId as Rt, writeWorkerSteer as S, createBudgetPool as Si, captureProviderWorkspaceSnapshot as Sn, finalizeRuntimeOwnedPendingExecutor as Sr, scopeRetainedOwnerResourceReader as St, sumSpendFromEvents as T, spendFromUsageEvents as Ti, workspaceCaptureReceipt as Tn, knownMaterializationReceipt as Tr, abandonScopeRetainedOwnerInvocation as Tt, recordScopeOwnerMaterialization as U, notifySandboxEventObserver as Ui, createRuntimeEventCollector as Un, isRuntimeFlowBrain as Ur, loadSpawnForest as Ut, finalizeScopeOwnerMaterialization as V, extractLlmCallEvent as Vi, generateSpanId as Vn, executableAgentProfileSnapshot as Vr, scopeRetainedOwnerContext as Vt, restoreScopeOwnerAcceptedExecution as W, sameModelId as Wi, createRuntimeStreamEventCollector as Wn, runtimeFlowAgent as Wr, ownedTreeRootSpawn as Wt, reenteredWorkers as X, recordValue as Xi, harnessTranscriptArtifact as Xn, runtimeProviderCode as Xr, encodeResultBlob as Xt, runtimeGraphMetadataKey as Y, parseCodexUsageRecord as Yi, captureHarnessTranscript as Yn, runtimeFailureRemediationSchema as Yr, FileResultBlobStore as Yt, settledToIteration as Z, RetainedRunProviderContractError as Zi, harnessTranscriptFromLines as Zn, settlementFailureCause as Zr, SpawnEventIndex as Zt, supervisorRunDir as _, contentRef as _i, destroyInteractiveEnvironment as _n, attestRuntimeOwnedExecutor as _r, startScopeRecoveries as _t, readRootStream as a, abortReason as aa, retainedExecutorContext as ai, reconnectRetainedRun as an, DEFAULT_STALL_AFTER_MS as ar, hasRetriableTeardowns as at, workerInboxFileFromEventDir as b, credentialCommandExit as bi, assertProviderWorkspaceRetentionPort as bn, authoredAgentIdentity as br, prepareScopeRetainedOwnerSeatSwitch as bt, cancelWorker as c, signalAbortError as ca, UNAVAILABLE_STATUSES as ci, startRetainedRunInEnvironment as cn, readWorkerProgress as cr, recordScopeOwnerBarrenPause as ct, legacySupervisorRunsRoot as d, providerMessageText as da, unavailablePauseMs as di, offerInteractiveControl as dn, SeatChain as dr, registerNestedTeardownScope as dt, exactSession as ea, RetainedExecutionPendingError as ei, verifyWorkspaceMarker as en, readHarnessTranscript as er, freeSlots as et, readWorkerCancelRequests as f, unavailableResumeAt as fi, prepareInteractiveDelegation as fn, SeatChainExhaustedError as fr, releaseHeldEnvironments as ft, safeWorkerFile as g, contentAddress as gi, verifyObserverRecords as gn, attestRuntimeOwnedDeferredExecutor as gr, settleManagerWork as gt, readWorkerSteerRequests as h, TRACE_SUMMARY_SCHEMA as hi, observerRecordDigest as hn, subscriptionUsageLimitSignal as hr, retryUnconfirmedTeardowns as ht, nodeStreamFile as i, RunCancellationReason as ia, registerRetainedExecutorPreparation as ii, mintRetainedIdentity as in, retainHarnessTranscript as ir, closeScopeAdmission as it, interactiveAdmissionSeamKey as j, sandboxLeafOutputFromEvents as ji, workerTraceHeaders as jn, recordRuntimeOwnedProviderIdentityConflict as jr, scopeRetainedOwnerSettled as jt, workerTraceAnalysisStore as k, mapSandboxEvent as ki, WORKER_TRACE_PROPAGATION as kn, recordRuntimeOwnedProviderAttemptStart as kr, scopeRetainedOwnerResult as kt, claimWorkerSteerDelivery as l, promptFromAgentTurnInput as la, cappedDoublingMs as li, retainedCreateMaterial as ln, isLiveNodeStatus as lr, recordScopeOwnerDriverAttempt as lt, readWorkerSteerAcknowledgement as m, TRACE_ROOT_SCHEMA as mi, createFileObserverHooks as mn, seatExecutionProfile as mr, releaseRetainedEnvironments as mt, ROOT_STREAM_FILE as n, isTerminalSessionStatus as na, isProvisioningRefusal as ni, stopRetainedNativeExecution as nn, readBoundHarnessSessions as nr, rollingDispatch as nt, readRootStreamReceipt as o, linkAbort as oa, retainedExecutorSeamKey as oi, recoverRetainedRun as on, createActivityLog as or, meterRuntimeOwnedAccounting as ot, readWorkerCancellation as p, unavailableSignalOfFailure as pi, FileObserverJournal as pn, authoredSeatStages as pr, releaseManagerEnvironment as pt, coordinationProfileToolPrefix as q, sumSandboxUsage as qi, HARNESS_TRANSCRIPT_SETTLE_TIMEOUT_MS as qn, runtimeFailureCause as qr, driverRuntime as qt, createRootStreamSink as r, sameControlCoordinates as ra, isSchemaRejection as ri, assertRetainedRunReplayMaterial as rn, resolveHarnessTranscriptCapture as rr, closeRetainedSlots as rt, appendWorkerControlEvent as s, runAbortable as sa, UNAVAILABLE_CODES as si, startRetainedRun as sn, describeToolArgs as sr, meterRuntimeOwnedProviderAttempt as st, createScope as t, freezeControlRef as ta, TRANSPORT_ERROR_CODES as ti, describeRetainedNativeStops as tn, HARNESS_TRANSCRIPT_READ_LIMITS as tr, queueOf as tt, legacySupervisorRunDir as u, promptOptionsFromAgentTurnInput as ua, jitteredMs as ui, acceptedInteractiveControl as un, isTerminalNodeStatus as ur, recordScopeOwnerPause as ut, supervisorRunsRoot as v, executorFailure as vi, environmentGone as vn, attestRuntimeOwnedPendingExecutor as vr, unconfirmedTeardowns as vt, prepareScopeResume as w, newUsageTotals as wi, openNativeMirror as wn, knownExecutionBindingReceipt as wr, resolveSpawnResourcePaths as wt, writeWorkerCancellation as x, isCredentialRefusal as xi, captureProviderLiveWorkspace as xn, authoredProfileDigest as xr, releaseScopeRetainedOwnerForSeatPause as xt, workerCancellationsDir as y, hashJson as yi, DEFAULT_NATIVE_CAPTURE_INTERVAL_MS as yn, attestRuntimeOwnedScopeOwner as yr, waitForScopeChildren as yt, spawnJournalRecordEvents as z, createSandboxTurnEventCollector as zi, createOtelExporter as zn, unknownExecutionBindingReceipt as zr, bindScopeRetainedOwnerProvider as zt };
+export { deriveNodeExecutionIdentity as $, parseCodexUsageRecord as $i, persistHarnessTranscript as $n, DISPATCH_EXECUTION_CHANGED_CODE as $r, insideCursorNamespace as $t, nestedScopeSeamKey as A, spendFromUsageTotals as Ai, workerTraceEnv as An, recordRuntimeOwnedProviderAttemptStart as Ar, beginScopeRetainedOwnerDrive as At, beginScopeOwnerAttempt as B, extractTransportEventIdentity as Bi, flatOtelSpan as Bn, unknownExecutionBindingReceipt as Br, retainedOwnerWorkspaceRetentionSeamKey as Bt, writeWorkerSteerAcknowledgement as C, hashJson as Ci, nativeCopyDelayMs as Cn, finalizeRuntimeOwnedPendingExecutor as Cr, environmentReader as Ct, isTraceAnalysisStore as D, meterUsageEvent as Di, openSlotGroup as Dn, newExecutionAttemptId as Dr, prepareScopeRetainedOwnerTask as Dt, replaySpawnTree as E, createBudgetPool as Ei, createWorkerSlots as En, knownMaterializationReceipt as Er, consumeScopeRetainedOwnerResult as Et, recoverRetainedInteractiveRun as F, sandboxLeafOutputFromEvents as Fi, buildLoopOtelSpans as Fn, runtimeOwnedExecutorExecutionBinding as Fr, scopeRetainedOwnerRestorePoint as Ft, scopeOwnerExecutorNodeContext as G, extractLlmCallEvent as Gi, sanitizeKnowledgeReadinessReport as Gn, runtimeFlowAgent as Gr, materializeTreeView as Gt, noteScopeOwnerPlannedExecution as H, canonicalSandboxUsageMode as Hi, loopEventToOtelSpan as Hn, executableAgentProfileSnapshot as Hr, scopeRetainedOwnerJournalRoot as Ht, startRetainedInteractiveRun as I, sandboxOutputMarker as Ii, buildLoopSpanNodes as In, runtimeOwnedExecutorMaterialization as Ir, noteScopeRetainedOwnerCoordination as It, providerVisibleProfile as J, sameModelId as Ji, captureBoundHarnessTranscript as Jn, runtimeFailureCause as Jr, nestedDriverTreeRoot as Jt, coordinationMcpAlias as K, isSandboxTerminalEvent as Ki, sanitizeRuntimeStreamEvent as Kn, runtimeFlowBrain as Kr, attestNestedDriverTreeOwner as Kt, FileSpawnJournal as L, sandboxProgressEvents as Li, buildRuntimeEventOtelSpans as Ln, runtimeOwnedExecutorProviderEvidence as Lr, scopeRetainedOwnerCheckpointing as Lt, attachWorker as M, createSandboxToolPartState as Mi, createPropagatingTraceEmitter as Mn, recordRuntimeOwnedProviderIdentityConflict as Mr, scopeRetainedOwnerTurnEnded as Mt, readWorkerInteractiveBinding as N, mapSandboxEvent as Ni, mergeTraceEnv as Nn, recordRuntimeOwnedProviderModel as Nr, assertRetainedOwnerCoordinationRekey as Nt, parseWorkerToolTraceArtifact as O, newUsageTotals as Oi, resolveWorkerSlots as On, providerAttemptEvidence as Or, scopeRetainedOwnerPriorSpend as Ot, reconnectRetainedInteractiveRun as P, mapSandboxToolEvent as Pi, readTraceContextFromEnv as Pn, runtimeOwnedDriveHarnessProviderEvidence as Pr, reconcileScopeRetainedOwnerEnvironment as Pt, assertRecursiveReservationPolicy as Q, decodeHarnessUsage as Qi, harnessTranscriptUnavailable as Qn, settlementFailureCause as Qr, closesCursorSlot as Qt, appendSpawnEvents as R, terminalTextFromSandboxEvent as Ri, createOpenInferenceFileExporter as Rn, runtimeOwnedPendingExecutorMaterialization as Rr, bindScopeRetainedOwnerEnvironmentId as Rt, writeWorkerSteer as S, executorFailureInfra as Si, captureProviderWorkspaceSnapshot as Sn, authoredProfileDigest as Sr, scopeRetainedOwnerResourceReader as St, sumSpendFromEvents as T, isCredentialRefusal as Ti, workspaceCaptureReceipt as Tn, knownExecutionBindingReceipt as Tr, abandonScopeRetainedOwnerInvocation as Tt, recordScopeOwnerMaterialization as U, createSandboxTurnEventCollector as Ui, createRuntimeEventCollector as Un, executableAgentSpecSnapshot as Ur, loadSpawnForest as Ut, finalizeScopeOwnerMaterialization as V, assertSandboxServedModel as Vi, generateSpanId as Vn, unknownMaterializationReceipt as Vr, scopeRetainedOwnerContext as Vt, restoreScopeOwnerAcceptedExecution as W, createSandboxUsageLedger as Wi, createRuntimeStreamEventCollector as Wn, isRuntimeFlowBrain as Wr, ownedTreeRootSpawn as Wt, reenteredWorkers as X, sandboxTerminalUsageField as Xi, harnessTranscriptArtifact as Xn, runtimeFailureRemediationSchema as Xr, encodeResultBlob as Xt, runtimeGraphMetadataKey as Y, sandboxEventServedBackend as Yi, captureHarnessTranscript as Yn, runtimeFailureCauseSchema as Yr, FileResultBlobStore as Yt, settledToIteration as Z, sumSandboxUsage as Zi, harnessTranscriptFromLines as Zn, runtimeProviderCode as Zr, SpawnEventIndex as Zt, supervisorRunDir as _, TRACE_ROOT_SCHEMA as _i, destroyInteractiveEnvironment as _n, attestRuntimeOwnedDeferredExecutor as _r, startScopeRecoveries as _t, readRootStream as a, freezeControlRef as aa, registerRetainedExecutorPreparation as ai, reconnectRetainedRun as an, DEFAULT_STALL_AFTER_MS as ar, hasRetriableTeardowns as at, workerInboxFileFromEventDir as b, contentRef as bi, assertProviderWorkspaceRetentionPort as bn, attestRuntimeOwnedScopeOwner as br, prepareScopeRetainedOwnerSeatSwitch as bt, cancelWorker as c, RunCancellationReason as ca, UNAVAILABLE_CODES as ci, startRetainedRunInEnvironment as cn, readWorkerProgress as cr, recordScopeOwnerBarrenPause as ct, legacySupervisorRunsRoot as d, runAbortable as da, jitteredMs as di, offerInteractiveControl as dn, SEAT_RECHECK_MS as dr, registerNestedTeardownScope as dt, recordValue as ea, DISPATCH_NOT_ADMITTED_CODE as ei, verifyWorkspaceMarker as en, readHarnessTranscript as er, freeSlots as et, readWorkerCancelRequests as f, signalAbortError as fa, printedStatus as fi, prepareInteractiveDelegation as fn, SeatChain as fr, releaseHeldEnvironments as ft, safeWorkerFile as g, unavailableSignalOfFailure as gi, verifyObserverRecords as gn, subscriptionUsageLimitSignal as gr, settleManagerWork as gt, readWorkerSteerRequests as h, providerMessageText as ha, unavailableResumeAt as hi, observerRecordDigest as hn, seatExecutionProfile as hr, retryUnconfirmedTeardowns as ht, nodeStreamFile as i, exactSession as ia, isSchemaRejection as ii, mintRetainedIdentity as in, retainHarnessTranscript as ir, closeScopeAdmission as it, interactiveAdmissionSeamKey as j, assertValidBudget as ji, workerTraceHeaders as jn, recordRuntimeOwnedProviderDispatchNotStarted as jr, scopeRetainedOwnerSettled as jt, workerTraceAnalysisStore as k, spendFromUsageEvents as ki, WORKER_TRACE_PROPAGATION as kn, recordRuntimeOwnedDriveHarnessProviderEvidence as kr, scopeRetainedOwnerResult as kt, claimWorkerSteerDelivery as l, abortReason as la, UNAVAILABLE_STATUSES as li, retainedCreateMaterial as ln, isLiveNodeStatus as lr, recordScopeOwnerDriverAttempt as lt, readWorkerSteerAcknowledgement as m, promptOptionsFromAgentTurnInput as ma, unavailablePauseMs as mi, createFileObserverHooks as mn, authoredSeatStages as mr, releaseRetainedEnvironments as mt, ROOT_STREAM_FILE as n, assertEventBinding as na, TRANSPORT_ERROR_CODES as ni, stopRetainedNativeExecution as nn, readBoundHarnessSessions as nr, rollingDispatch as nt, readRootStreamReceipt as o, isTerminalSessionStatus as oa, retainedExecutorContext as oi, recoverRetainedRun as on, createActivityLog as or, meterRuntimeOwnedAccounting as ot, readWorkerCancellation as p, promptFromAgentTurnInput as pa, reportedResetAt as pi, FileObserverJournal as pn, SeatPauseError as pr, releaseManagerEnvironment as pt, coordinationProfileToolPrefix as q, notifySandboxEventObserver as qi, HARNESS_TRANSCRIPT_SETTLE_TIMEOUT_MS as qn, reportedFailureCause as qr, driverRuntime as qt, createRootStreamSink as r, awaitAbortable$1 as ra, isProvisioningRefusal as ri, assertRetainedRunReplayMaterial as rn, resolveHarnessTranscriptCapture as rr, closeRetainedSlots as rt, appendWorkerControlEvent as s, sameControlCoordinates as sa, retainedExecutorSeamKey as si, startRetainedRun as sn, describeToolArgs as sr, meterRuntimeOwnedProviderAttempt as st, createScope as t, RetainedRunProviderContractError as ta, RetainedExecutionPendingError as ti, describeRetainedNativeStops as tn, HARNESS_TRANSCRIPT_READ_LIMITS as tr, queueOf as tt, legacySupervisorRunDir as u, linkAbort as ua, cappedDoublingMs as ui, acceptedInteractiveControl as un, isTerminalNodeStatus as ur, recordScopeOwnerPause as ut, supervisorRunsRoot as v, TRACE_SUMMARY_SCHEMA as vi, environmentGone as vn, attestRuntimeOwnedExecutor as vr, unconfirmedTeardowns as vt, prepareScopeResume as w, credentialCommandExit as wi, openNativeMirror as wn, inheritRuntimeOwnedExecutorAttestation as wr, resolveSpawnResourcePaths as wt, writeWorkerCancellation as x, executorFailure as xi, captureProviderLiveWorkspace as xn, authoredAgentIdentity as xr, releaseScopeRetainedOwnerForSeatPause as xt, workerCancellationsDir as y, contentAddress as yi, DEFAULT_NATIVE_CAPTURE_INTERVAL_MS as yn, attestRuntimeOwnedPendingExecutor as yr, waitForScopeChildren as yt, spawnJournalRecordEvents as z, canonicalStreamEventFromSandboxEvent as zi, createOtelExporter as zn, runtimeOwnedScopeOwnerRuntime as zr, bindScopeRetainedOwnerProvider as zt };
 
-//# sourceMappingURL=scope-D04GkJ6P.js.map
+//# sourceMappingURL=scope-CJ7xtrs8.js.map