@tangle-network/agent-runtime 3.0.43 → 5.0.0

package/dist/{scope-Bg1uCsPR.js → scope-JcCkUy_z.js}

@@ -1,6 +1,6 @@
-import { c as RetainedInteractiveAdmissionError, d as RetainedRunDispatchBindingError, f as RuntimeRunStateError, l as RetainedInteractiveBindingError, m as ValidationError, r as BackendTransportError, u as RetainedRunAdmissionError } from "./errors-AzSuGI23.js";
+import { c as RetainedInteractiveAdmissionError, d as RetainedRunDispatchBindingError, f as RuntimeRunStateError, l as RetainedInteractiveBindingError, m as ValidationError, r as BackendTransportError, t as AgentEvalError$1, u as RetainedRunAdmissionError } from "./errors-AzSuGI23.js";
 import { $ as isAsyncIterable, Ct as boundedChildDeadlineAt, Dt as teardownExecutor, Et as singleFlightTeardown, F as deepFreezeCandidate, G as chargedTokens, H as abortError, K as cloneSpend, St as armDeadlineTimer, U as addSpend, W as addTokenUsage, X as fnv1a32Hex, Y as errorMessage, Z as hasCompleteCacheBreakdown, a as verifyAgentCandidateWorkspaceArtifacts, at as sleep, dt as zeroSpend, ft as zeroTokenUsage, g as workspaceLimits, gt as withBudgetResources, h as verifyAgentCandidateWorkspaceArchive, ht as resourceTelemetry, i as readAgentCandidateWorkspaceArtifactFiles, j as verifiedArtifactChunks, k as verifyWorkspaceSnapshotArtifacts, m as safeArchivePath, mt as assertResources, o as verifyAgentCandidateWorkspaceTree, pt as addResourceSpend, q as cloneTokenUsage, tt as promptCacheTokenClasses, vt as CHILD_DEADLINE_REASON, wt as checkInIdleMs, z as sha256Bytes$1 } from "./workspace-streams-8ALHaZzx.js";
-import { _ as errorText, a as readCommittedJsonLines, b as resolveRedactor, c as appendCommittedJsonLine, d as detachedSnapshot, f as shareParsedStrings, g as errorProperty, l as sha256, m as errMessage, p as causeChain, r as prepareJsonlAppend, s as withJsonlFileLock, t as isNoEntError, v as defaultRedactor } from "./jsonl-file-CbxMVnUj.js";
+import { _ as errorText, a as readCommittedJsonLines, b as resolveRedactor, c as appendCommittedJsonLine, d as detachedSnapshot, f as shareParsedStrings, g as errorProperty, l as sha256, m as errMessage, p as causeChain, r as prepareJsonlAppend, s as withJsonlFileLock, t as isNoEntError, v as defaultRedactor } from "./jsonl-file-CeVYTIQJ.js";
 import { t as assertExecutableAgentProfile } from "./model-policy-JOcg3NRs.js";
 import { a as writeAtomicDurableFile, n as assertNoSymlinkDescendant, o as captureRunWriteContext, r as publishExclusiveDurableFile, s as fenceRunWrite, t as appendDurableFile } from "./durable-file-DstVeHcj.js";
 import { a as withPursuitContext, i as notifyRuntimeHookEvent } from "./runtime-hooks-CsW2pfFk.js";
@@ -12,6 +12,7 @@ import { isRecord } from "@tangle-network/agent-core";
 import { collectAgentFinalMessageText, collectAgentResponseText } from "@tangle-network/sandbox";
 import { z } from "zod";
 import { redact } from "@tangle-network/agent-eval/traces";
+import { AgentTurnFailureSchema } from "@tangle-network/agent-interface/environment-provider";
 import { createHash, randomUUID } from "node:crypto";
 import { setImmediate as setImmediate$1 } from "node:timers/promises";
 import { LedgerCanonicalizationError, canonicalString, jsonDocument, merkleLeafHash, merkleRoot, merkleSalt } from "@tangle-network/agent-eval/ledger-core";
@@ -1725,8 +1726,8 @@ function assertValidBudget(budget, label = "budget") {
 		if (!Number.isFinite(value) || value < 0) throw new Error(`${label}.${field} must be a non-negative finite number`);
 	};
 	assertResources(budget.resources, "limit", `${label}.resources`);
-	safeInteger(budget.maxIterations, "maxIterations");
-	safeInteger(budget.maxTokens, "maxTokens");
+	if (budget.maxIterations !== void 0) safeInteger(budget.maxIterations, "maxIterations");
+	if (budget.maxTokens !== void 0) safeInteger(budget.maxTokens, "maxTokens");
 	if (budget.maxUsd !== void 0) finiteNonNegative(budget.maxUsd, "maxUsd");
 	if (budget.deadlineMs !== void 0) finiteNonNegative(budget.deadlineMs, "deadlineMs");
 }
@@ -1767,6 +1768,8 @@ function assertValidSpend(spend, label) {
 */
 function openBudgetLedger(root, runStartedAtMs) {
 	return {
+		tokensCapped: root.maxTokens !== void 0,
+		iterationsCapped: root.maxIterations !== void 0,
 		usdCapped: root.maxUsd !== void 0,
 		absoluteDeadlineMs: root.deadlineMs === void 0 ? 0 : runStartedAtMs + root.deadlineMs,
 		resources: new Map(Object.entries(root.resources ?? {}).map(([name, value]) => [name, {
@@ -1776,7 +1779,7 @@ function openBudgetLedger(root, runStartedAtMs) {
 			committed: 0,
 			known: true
 		}])),
-		freeTokens: root.maxTokens,
+		freeTokens: root.maxTokens ?? 0,
 		reservedTokens: 0,
 		committedTokens: 0,
 		tokensTainted: false,
@@ -1786,7 +1789,7 @@ function openBudgetLedger(root, runStartedAtMs) {
 		committedUsd: 0,
 		usdTainted: false,
 		usdMeasured: true,
-		freeIterations: root.maxIterations,
+		freeIterations: root.maxIterations ?? 0,
 		reservedIterations: 0,
 		committedIterations: 0,
 		ownerSpent: {
@@ -1853,9 +1856,9 @@ function ledgerCommitResources(l, spend, allocations, requireAll = true) {
 }
 /** Every channel `b` does not fit, measured against the free balance less `keep`. */
 function ledgerShortfalls(l, b, keep) {
-	const wantTokens = b.maxTokens;
+	const wantTokens = b.maxTokens ?? 0;
 	const wantUsd = b.maxUsd ?? 0;
-	const wantIterations = b.maxIterations;
+	const wantIterations = b.maxIterations ?? 0;
 	const shortfalls = [];
 	const short = (channel, requested, free, held, closedByUnknownSpend = false) => {
 		shortfalls.push({
@@ -1875,8 +1878,8 @@ function ledgerShortfalls(l, b, keep) {
 	const kept = (share = 0, spent) => Math.max(0, share - spent);
 	const tokensFree = l.freeTokens - kept(keep?.tokens, chargedTokens(l.ownerSpent.tokens));
 	const iterationsFree = l.freeIterations - kept(keep?.iterations, l.ownerSpent.iterations);
-	if (wantTokens > tokensFree) short("tokens", wantTokens, tokensFree, l.reservedTokens);
-	if (wantIterations > iterationsFree) short("iterations", wantIterations, iterationsFree, l.reservedIterations);
+	if (l.tokensCapped && wantTokens > tokensFree) short("tokens", wantTokens, tokensFree, l.reservedTokens);
+	if (l.iterationsCapped && wantIterations > iterationsFree) short("iterations", wantIterations, iterationsFree, l.reservedIterations);
 	const usdFree = l.freeUsd - kept(keep?.usd, l.ownerSpent.usd);
 	if (l.usdCapped && !l.usdTainted && wantUsd > usdFree) short("usd", wantUsd, usdFree, l.reservedUsd);
 	return shortfalls;
@@ -1888,10 +1891,14 @@ function ledgerTake(l, b) {
 		state.remaining -= amount;
 		state.reserved += amount;
 	}
-	l.freeTokens -= b.maxTokens;
-	l.reservedTokens += b.maxTokens;
-	l.freeIterations -= b.maxIterations;
-	l.reservedIterations += b.maxIterations;
+	if (l.tokensCapped) {
+		l.freeTokens -= b.maxTokens ?? 0;
+		l.reservedTokens += b.maxTokens ?? 0;
+	}
+	if (l.iterationsCapped) {
+		l.freeIterations -= b.maxIterations ?? 0;
+		l.reservedIterations += b.maxIterations ?? 0;
+	}
 	l.freeUsd -= b.maxUsd ?? 0;
 	l.reservedUsd += b.maxUsd ?? 0;
 }
@@ -1902,18 +1909,20 @@ function ledgerTake(l, b) {
 * dollar ceiling: without `maxUsd` it reserved NO dollars, so under a capped root its dollars are
 * OBSERVED spend, committed and debited from `free` like `observe`d inference.
 */
-function ledgerClassifyOverspend(l, held, usdBudgeted, spent) {
+function ledgerClassifyOverspend(l, held, usdBudgeted, spent, limits) {
 	const unknownUnderCap = l.usdCapped && spent.usdKnown === false;
 	const spentTokens = chargedTokens(spent.tokens);
 	const overspent = [];
-	if (spentTokens > held.tokens) overspent.push({
+	const tokens = limits === void 0 ? held.tokens : limits.maxTokens;
+	const iterations = limits === void 0 ? held.iterations : limits.maxIterations;
+	if (tokens !== void 0 && spentTokens > tokens) overspent.push({
 		channel: "tokens",
-		reserved: held.tokens,
+		reserved: tokens,
 		spent: spentTokens
 	});
-	if (spent.iterations > held.iterations) overspent.push({
+	if (iterations !== void 0 && spent.iterations > iterations) overspent.push({
 		channel: "iterations",
-		reserved: held.iterations,
+		reserved: iterations,
 		spent: spent.iterations
 	});
 	if (!unknownUnderCap && l.usdCapped && usdBudgeted && spent.usd > held.usd) overspent.push({
@@ -1933,12 +1942,16 @@ function ledgerClassifyOverspend(l, held, usdBudgeted, spent) {
 function ledgerSettle(l, held, spent, unknownUnderCap) {
 	noteUnknowns(l, spent);
 	const spentTokens = chargedTokens(spent.tokens);
-	l.reservedTokens -= held.tokens;
 	l.committedTokens += spentTokens;
-	l.freeTokens += held.tokens - spentTokens;
-	l.reservedIterations -= held.iterations;
+	if (l.tokensCapped) {
+		l.reservedTokens -= held.tokens;
+		l.freeTokens += held.tokens - spentTokens;
+	}
 	l.committedIterations += spent.iterations;
-	l.freeIterations += held.iterations - spent.iterations;
+	if (l.iterationsCapped) {
+		l.reservedIterations -= held.iterations;
+		l.freeIterations += held.iterations - spent.iterations;
+	}
 	if (l.usdCapped) {
 		l.reservedUsd -= held.usd;
 		l.committedUsd += spent.usd;
@@ -1965,9 +1978,9 @@ function ledgerObserve(l, spend, unknownUnderCap, requireAllResources) {
 function debit(l, spend) {
 	noteUnknowns(l, spend);
 	const tokens = chargedTokens(spend.tokens);
-	l.freeTokens -= tokens;
+	if (l.tokensCapped) l.freeTokens -= tokens;
 	l.committedTokens += tokens;
-	l.freeIterations -= spend.iterations;
+	if (l.iterationsCapped) l.freeIterations -= spend.iterations;
 	l.committedIterations += spend.iterations;
 	l.committedUsd += spend.usd;
 	if (l.usdCapped) l.freeUsd -= spend.usd;
@@ -2002,14 +2015,16 @@ function ledgerRestore(l, root, restore) {
 		}, root));
 		l.tokensTainted = true;
 		l.usdMeasured = false;
-		l.freeTokens -= uncertain.maxTokens;
-		l.committedTokens += uncertain.maxTokens;
-		l.freeIterations -= uncertain.maxIterations;
-		l.committedIterations += uncertain.maxIterations;
+		const tokens = uncertain.maxTokens ?? (l.tokensCapped ? Math.max(0, l.freeTokens) : 0);
+		const iterations = uncertain.maxIterations ?? (l.iterationsCapped ? Math.max(0, l.freeIterations) : 0);
+		l.committedTokens += tokens;
+		l.committedIterations += iterations;
+		if (l.tokensCapped) l.freeTokens -= tokens;
+		if (l.iterationsCapped) l.freeIterations -= iterations;
 		if (!l.usdCapped) continue;
 		if (uncertain.maxUsd === void 0) {
 			l.usdTainted = true;
-			l.committedUsd += l.freeUsd > 0 ? l.freeUsd : 0;
+			l.committedUsd += Math.max(0, l.freeUsd);
 			l.freeUsd = 0;
 		} else {
 			l.freeUsd -= uncertain.maxUsd;
@@ -2141,7 +2156,7 @@ async function foldUsage(events) {
 * overspend of a $0 ceiling. Unknowable dollar cost under a dollar limit closes the known
 * token/iteration work, marks the dollar channel unusable and refuses later reservations. An
 * unknowable TOKEN count records the work, debits what is known, and marks
-* `readout().tokensKnown` false (a ceiling, not a measurement); tokens are always capped, so one
+* `readout().tokensKnown` false (a ceiling, not a measurement); one
 * unreported turn must not end the run.
 *
 * A reservation the free balance cannot cover now can WAIT (`reserve(b, holder, { wait: true })`)
@@ -2217,7 +2232,7 @@ function createBudgetPool(root, runStartedAtMs, restore = {}) {
 	function admitToWait(b, holder, keep) {
 		const id = nextTicketId++;
 		open.set(id, holder);
-		const ticket = ticketFor(id, b);
+		const ticket = ticketFor(id, b, ledger);
 		let grant;
 		let refuse;
 		const granted = new Promise((resolve, reject) => {
@@ -2256,7 +2271,7 @@ function createBudgetPool(root, runStartedAtMs, restore = {}) {
 			open.set(id, holder);
 			return {
 				ok: true,
-				ticket: ticketFor(id, b)
+				ticket: ticketFor(id, b, ledger)
 			};
 		}
 		if (options.wait !== true || !fitsAfterRefunds(shortfalls)) return {
@@ -2290,7 +2305,10 @@ function createBudgetPool(root, runStartedAtMs, restore = {}) {
 			resources: void 0
 		} : ticket.reserved;
 		const usdBudgeted = ticket.reserved.usdBudgeted !== false;
-		const { overspent, unknownUnderCap } = ledgerClassifyOverspend(ledger, held, usdBudgeted, spent);
+		const { overspent, unknownUnderCap } = ledgerClassifyOverspend(ledger, held, usdBudgeted, spent, heldNothing ? {
+			maxTokens: 0,
+			maxIterations: 0
+		} : ticket.limits);
 		let fault = unknownUnderCap ? `ticket ${ticket.id} reported unknown dollar cost under a dollar-capped budget` : void 0;
 		open.delete(ticket.id);
 		const resourceSettlement = ledgerSettle(ledger, held, spent, unknownUnderCap);
@@ -2314,12 +2332,15 @@ function createBudgetPool(root, runStartedAtMs, restore = {}) {
 		return {
 			...ledger.resources.size ? { resources: Object.fromEntries([...ledger.resources].map(([name, value]) => [name, { ...value }])) } : {},
 			tokensLeft: ledger.freeTokens,
+			tokensCapped: ledger.tokensCapped,
+			committedTokens: ledger.committedTokens,
 			tokensKnown: !ledger.tokensTainted,
 			cacheBreakdownKnown: !ledger.cacheBreakdownTainted,
 			usdLeft: ledger.usdCapped ? ledger.usdTainted ? 0 : ledger.freeUsd : 0,
 			usdCapped: ledger.usdCapped,
 			usdKnown: ledger.usdMeasured && !ledger.usdTainted,
 			iterationsLeft: ledger.freeIterations,
+			iterationsCapped: ledger.iterationsCapped,
 			deadlineMs: ledger.absoluteDeadlineMs,
 			reservedTokens: ledger.reservedTokens
 		};
@@ -2358,14 +2379,18 @@ function assertResourceDeclarations(ledger, b) {
 function fitsAfterRefunds(shortfalls) {
 	return shortfalls.every((shortfall) => shortfall.closedByUnknownSpend !== true && shortfall.requested <= shortfall.free + (shortfall.held ?? 0));
 }
-function ticketFor(id, b) {
+function ticketFor(id, b, ledger) {
 	return {
 		id,
+		limits: {
+			...b.maxTokens === void 0 ? {} : { maxTokens: b.maxTokens },
+			...b.maxIterations === void 0 ? {} : { maxIterations: b.maxIterations }
+		},
 		reserved: {
 			...b.resources === void 0 ? {} : { resources: Object.fromEntries(Object.entries(b.resources).map(([name, value]) => [name, { ...value }])) },
-			tokens: b.maxTokens,
+			tokens: ledger.tokensCapped ? b.maxTokens ?? 0 : 0,
 			usd: b.maxUsd ?? 0,
-			iterations: b.maxIterations,
+			iterations: ledger.iterationsCapped ? b.maxIterations ?? 0 : 0,
 			usdBudgeted: b.maxUsd !== void 0
 		}
 	};
@@ -2440,7 +2465,8 @@ function jsonContentText(value) {
 // src/runtime/supervise/executor-outcome.ts
 const outcomeSchema = AgentTurnResultSchema.pick({
 	success: true,
-	error: true
+	error: true,
+	failure: true
 }).extend({
 	errorCode: AgentTurnResultSchema.shape.error,
 	statusCode: z.number().int().min(400).max(599).optional()
@@ -2452,6 +2478,7 @@ function executorFailure(result) {
 	if (outcome.success) return void 0;
 	return {
 		error: outcome.error ?? "Agent execution failed",
+		...outcome.failure === void 0 ? {} : { failure: outcome.failure },
 		...outcome.errorCode === void 0 ? {} : { errorCode: outcome.errorCode },
 		...outcome.statusCode === void 0 ? {} : { statusCode: outcome.statusCode }
 	};
@@ -2460,19 +2487,51 @@ function executorFailure(result) {
 function executorFailureReason(result) {
 	return executorFailure(result)?.error;
 }
-/**
-* The platform's own failure vocabulary: machine codes and lifecycle messages that the sandbox
-* runtime, the router, or the egress path put in an executor envelope when the platform, not
-* the agent's work, ended the execution. Each entry names its evidence: the count is how many
-* down children carried it on the 2026-09-20 fleet corpus (277 down settlements across 691
-* runs), every one of them stamped `infra: false` by the hard-coded call site this table
-* replaced. The table is deliberately the platform's fixed strings, not the agent's prose.
-*/
+/** Canonical producer classifications take precedence over the legacy code/message vocabulary. */
+const TURN_FAILURE_POLICY = {
+	capacity: {
+		classification: "unavailable",
+		failureKind: "infra",
+		infra: true,
+		code: "upstream-unavailable",
+		owner: "platform"
+	},
+	caller: {
+		classification: "terminal",
+		failureKind: "deterministic",
+		infra: void 0,
+		code: "request-rejected",
+		owner: "caller"
+	},
+	infra: {
+		classification: "transient",
+		failureKind: "infra",
+		infra: true,
+		code: "transport",
+		owner: "platform"
+	},
+	work: {
+		classification: "transient",
+		failureKind: "deterministic",
+		infra: void 0,
+		code: "work-failed",
+		owner: "work"
+	}
+};
+const turnFailurePolicy = (failure) => TURN_FAILURE_POLICY[failure.kind];
+/** Validate the shared contract on an envelope or any wrapped cause; malformed legacy data falls back. */
+function turnFailureOf(value) {
+	for (const link of causeChain(value)) try {
+		const parsed = AgentTurnFailureSchema.safeParse(Reflect.get(link, "failure"));
+		if (parsed.success) return parsed.data;
+	} catch {}
+}
 const PLATFORM_FAILURE_CODES = new Set([
 	"QUOTA_EXCEEDED",
 	"provider_quota_exceeded",
 	"provider_quota_exhausted",
 	"buffer.overflow",
+	"EXECUTION_INTERRUPTED",
 	"TIMEOUT",
 	"ECONNRESET",
 	"ECONNREFUSED",
@@ -2483,7 +2542,6 @@ const PLATFORM_FAILURE_CODES = new Set([
 const PLATFORM_FAILURE_MESSAGES = [
 	/^terminated$/u,
 	/Execution exceeded its time limit/u,
-	/Execution interrupted: the agent runtime restarted/u,
 	/Platform key[- ]verification/u,
 	/Platform key delegation failed/u,
 	/Bad Gateway/iu,
@@ -2501,18 +2559,9 @@ const PLATFORM_FAILURE_MESSAGES = [
 	/OpenCode exited while a model step was still in progress/u,
 	/the agent runtime restarted/u
 ];
-/**
-* Whether an executor envelope's failure was the platform's, as far as the envelope can say.
-*
-* `true` when the code or the message is in the platform's own vocabulary above. `undefined`
-* otherwise: the harness reported a failure and nothing in the envelope attributes it, so the
-* settlement carries no `infra` claim at all rather than a false one. This path never answers
-* `false`, because an executor envelope cannot prove the agent's work was at fault; the throw
-* path in `scope.ts` still answers `false` for an ordinary thrown result, where the runtime does
-* know. Until this function existed both envelope sites stamped `infra: false` unconditionally,
-* and the flag caught 1 of the 78 platform losses it was checked against on the fleet corpus.
-*/
+/** Producer-owned classification first; legacy platform codes/messages otherwise leave attribution unknown. */
 function executorFailureInfra(failure) {
+	if (failure.failure) return turnFailurePolicy(failure.failure).infra;
 	const code = failure.errorCode?.toLowerCase();
 	if (code !== void 0 && PLATFORM_FAILURE_CODES.has(code)) return true;
 	return PLATFORM_FAILURE_MESSAGES.some((pattern) => pattern.test(failure.error)) ? true : void 0;
@@ -2717,24 +2766,8 @@ function storedText(event) {
 	return JSON.stringify(event) ?? "null";
 }
 // src/runtime/supervise/upstream-unavailable.ts
-/**
-* An upstream that cannot serve NOW: how Runtime recognizes one, and how long an agent waits for it.
-*
-* A model provider's exhausted quota, a rate limit, an overload, or the router's own refused
-* credential is not a fault in the agent: the same request succeeds when capacity returns. A
-* driver that meets one re-enters after a pause (`runDriverWithRetry`), and a leaf continues in
-* its environment after the same pause (`providerAsExecutor`). Both read the refusal and the pause
-* from here, so an outage costs a director and its workers the same number of turns.
-*
-* This module imports nothing, so the provider executor can read it without the error classes of
-* `../../errors`.
-*/
-/**
-* Machine codes that say the upstream cannot serve now rather than that the request is wrong.
-* Each is a code an upstream publishes, not prose: the router's
-* (`lib/model-substitution.ts`, `lib/upstream-error-triage.ts`) and the OpenAI- and Anthropic-shaped
-* error types a relayed body carries.
-*/
+/** Shared capacity recognition and pause policy for drivers and retained leaves. */
+/** Legacy capacity codes for producers without the canonical failure contract. */
 const UNAVAILABLE_CODES = /* @__PURE__ */ new Set([
 	"provider_quota_exhausted",
 	"provider_quota_exceeded",
@@ -2754,12 +2787,7 @@ const UNAVAILABLE_STATUSES = /* @__PURE__ */ new Set([
 	503,
 	529
 ]);
-/**
-* A harness that flattens the router's JSON body into its own failure text leaves the router's
-* code in that text: `opencode execution failed: No provider served model "..."
-* (provider_quota_exhausted)`. The code is matched as a whole token, and a status only in the
-* `status code <n>` framing a harness prints, so prose that merely mentions a quota does not match.
-*/
+/** Legacy text fallback reads whole code tokens and explicitly framed HTTP statuses. */
 function unavailableSignalInText(text) {
 	for (const token of text.toLowerCase().matchAll(/[a-z_]+/gu)) if (UNAVAILABLE_CODES.has(token[0])) return token[0];
 	const status = printedStatus(text);
@@ -2770,13 +2798,7 @@ const printedStatus = (text) => {
 	const status = text.match(/\bstatus code (\d{3})\b/u)?.[1];
 	return status === void 0 ? void 0 : Number(status);
 };
-/**
-* Sandbox's 409 `NO_HOST_FITS_SHAPE` for a shape that fits its host's ceiling: no exceeded
-* dimension, only `its room is held placeable on <sku>`. It is sent by mistake for "no room now"
-* while new hosts cannot be planned, and the create lands within one autoscaler purchase. Four
-* nodes of Discovery run magnetar-rust-sandbox-20261101a went down on it. A shape over the ceiling
-* names the dimension it exceeds instead, and stays refused.
-*/
+/** Held room for an otherwise placeable shape is temporary capacity; oversized shapes stay refused. */
 const HELD_ROOM_REFUSAL = /\bits room is held placeable\b/u;
 /**
 * The code or status that marks a failed turn outcome as an upstream capacity refusal, or
@@ -2785,6 +2807,8 @@ const HELD_ROOM_REFUSAL = /\bits room is held placeable\b/u;
 * report the router's refusal as text.
 */
 function unavailableSignalOfFailure(failure) {
+	const typed = turnFailureOf(failure);
+	if (typed) return turnFailurePolicy(typed).classification === "unavailable" ? typed.code : void 0;
 	const code = failure.errorCode?.toLowerCase();
 	if (code !== void 0 && UNAVAILABLE_CODES.has(code)) return code;
 	if (code === "no_host_fits_shape" && HELD_ROOM_REFUSAL.test(failure.error)) return "host-room-held";
@@ -2810,26 +2834,29 @@ function cappedDoublingMs(consecutive, first, ceiling) {
 const MAX_RESET_HOLD_MS = 216e5;
 /** How often a refusal whose reset is beyond {@link MAX_RESET_HOLD_MS} is probed again. */
 const FAR_RESET_PROBE_MS = 36e5;
+/** Read canonical reset/retry-after before legacy structured reset fields; never parse text. */
+function reportedResetAt(error, nowMs = Date.now()) {
+	const typed = turnFailureOf(error);
+	if (typed) return typed.resetAt !== void 0 ? Date.parse(typed.resetAt) : typed.retryAfterMs !== void 0 ? nowMs + typed.retryAfterMs : void 0;
+	for (const cause of causeChain(error)) {
+		let value;
+		try {
+			value = Reflect.get(cause, "resetAt");
+		} catch {
+			continue;
+		}
+		const at = typeof value === "number" ? value : typeof value === "string" ? Date.parse(value) : NaN;
+		if (Number.isFinite(at)) return at;
+	}
+}
 /**
-* When a refusal says its quota resets, as epoch ms, or `undefined` when it names no usable time.
-* The Z.ai Coding Plan's opencode refusal names one in Beijing time with no zone:
-* `Usage limit reached for 5 hour. Your limit will reset at 2026-10-18 15:17:33`. On Discovery run
-* magnetar-rust-20261018b, 219 of 324 driver attempts ended on it between 06:04Z and 22:18Z, and
-* the last refusal came at 22:18Z against `reset at 2026-10-19 06:18:14`, which is 22:18:14Z at
-* +08:00. A time with its own zone is read as written. A time in the past is no reset time: the
-* caller keeps its doubling pause. A time more than MAX_RESET_HOLD_MS ahead is held for only
-* FAR_RESET_PROBE_MS at a time, so a misread zone cannot hold a seat for a day, yet the spent seat
-* is not asked again every 5 minutes: on magnetar-rust-20261019c a reset beyond 6 h drew about 12
-* attempts an hour against the refusing seat.
+* Until when a reported reset holds a pause, or `undefined` for none (absent or past: the caller
+* keeps its doubling pause). A reset more than MAX_RESET_HOLD_MS ahead is held FAR_RESET_PROBE_MS
+* at a time; on magnetar-rust-20261019c a far reset drew about 12 attempts an hour.
 */
-function unavailableResumeAt(text, nowMs) {
-	const match = text.match(/\breset at (\d{4}-\d{2}-\d{2})[ T](\d{2}:\d{2}:\d{2})(?:\.\d+)?(Z|[+-]\d{2}:?\d{2})?/u);
-	if (match === null) return void 0;
-	const zone = match[3] ?? (/Usage limit reached for \d+ hour/u.test(text) ? "+08:00" : void 0);
-	if (zone === void 0) return void 0;
-	const at = Date.parse(`${match[1]}T${match[2]}${zone.length === 5 ? `${zone.slice(0, 3)}:${zone.slice(3)}` : zone}`);
-	if (!Number.isFinite(at) || at <= nowMs) return void 0;
-	return at - nowMs > MAX_RESET_HOLD_MS ? nowMs + FAR_RESET_PROBE_MS : at;
+function unavailableResumeAt(resetAt, nowMs) {
+	if (resetAt === void 0 || resetAt <= nowMs) return void 0;
+	return resetAt - nowMs > MAX_RESET_HOLD_MS ? nowMs + FAR_RESET_PROBE_MS : resetAt;
 }
 /**
 * Spread a wait over `[ms / 2, ms]`. Every driver a Platform restart cut off fails within the same
@@ -3220,6 +3247,8 @@ function runtimeProviderCode(value) {
 	return typeof value === "string" && MACHINE_CODE_PATTERN.test(value) ? value : void 0;
 }
 function upstreamMachineCode(links) {
+	const typed = links.map(turnFailureOf).find((value) => value !== void 0);
+	if (typed) return runtimeProviderCode(typed.code);
 	return [
 		"upstreamCode",
 		"errorCode",
@@ -3228,6 +3257,8 @@ function upstreamMachineCode(links) {
 }
 /** The typed HTTP status and retry-after of the link carrying the provider's code. */
 function upstreamResponse(links, providerCode) {
+	const typed = links.map(turnFailureOf).find((value) => value !== void 0);
+	if (typed?.retryAfterMs !== void 0) return { retryAfterMs: typed.retryAfterMs };
 	const link = links.find((each) => [
 		"upstreamCode",
 		"errorCode",
@@ -3266,6 +3297,12 @@ function runtimeFailureCause(error, context = {}) {
 			code: caller,
 			owner: "caller"
 		});
+		for (const link of links) {
+			if (link instanceof RetainedExecutionPendingError && link.pendingCause === "provider-contract") return failure(retainedFailures["provider-contract"]);
+			if (read(link, "name") === "RetainedRunProviderContractError") return failure(retainedFailures[classifyRetainedPendingCause(link)]);
+		}
+		const typed = error instanceof AgentEvalError$1 && !(error instanceof BackendTransportError) ? void 0 : turnFailureOf(error);
+		if (typed) return failure(turnFailurePolicy(typed));
 		if (context.signal === void 0 && links.some((link) => read(link, "name") === "AbortError")) return failure({
 			code: "aborted",
 			owner: "caller"
@@ -3303,7 +3340,8 @@ function runtimeFailureCause(error, context = {}) {
 function reportedFailureCause(outcome) {
 	return runtimeFailureCause(Object.assign(new Error(outcome.error ?? "execution reported a failure"), {
 		errorCode: outcome.errorCode,
-		statusCode: outcome.statusCode
+		statusCode: outcome.statusCode,
+		failure: outcome.failure
 	}));
 }
 /**
@@ -3500,14 +3538,21 @@ function runtimeOwnedDeferredExecutorRuntime(executor) {
 	return attestation?.kind === "deferred" ? attestation.runtime : void 0;
 }
 /** Propagate trust from a built-in driver adapter to the Agent and recursive executor it owns. */
-function attestRuntimeOwnedScopeOwner(owner, runtime) {
-	runtimeOwnedScopeOwners.set(owner, runtime);
+function attestRuntimeOwnedScopeOwner(owner, runtime, control) {
+	runtimeOwnedScopeOwners.set(owner, {
+		runtime,
+		...control === void 0 ? {} : { control }
+	});
 	return owner;
 }
+/** A trusted owner's existing provider control remains available before any execution turn. */
+function runtimeOwnedScopeOwnerControl(owner) {
+	return runtimeOwnedScopeOwners.get(owner)?.control;
+}
 /** Return a built-in scope owner's expected concrete leaf runtime; caller-owned functions/Agents
 * deliberately have no entry even if they add lookalike fields. */
 function runtimeOwnedScopeOwnerRuntime(owner) {
-	return runtimeOwnedScopeOwners.get(owner);
+	return runtimeOwnedScopeOwners.get(owner)?.runtime;
 }
 /** Mark one provider inference attempt on a Runtime-owned executor. */
 function recordRuntimeOwnedProviderAttemptStart(executor) {
@@ -3774,12 +3819,17 @@ function providerAttemptEvidence(model) {
 	});
 }
 // src/runtime/supervise/seat-chain.ts
-var SeatChainExhaustedError = class extends Error {
+/** How often a pause with no known reset asks again, the account cache's cadence. */
+const SEAT_RECHECK_MS = 12e4;
+/** No seat can start before `resumeAt`: the chain is exhausted, or `detail` says why not. */
+var SeatPauseError = class extends Error {
 	resumeAt;
-	constructor(resumeAt) {
-		super(`authored subscription seat chain exhausted; resume at ${resumeAt}`);
-		this.name = "SeatChainExhaustedError";
+	detail;
+	constructor(resumeAt, detail) {
+		super(`${detail ?? "authored subscription seat chain exhausted"}; resume at ${resumeAt}`);
+		this.name = "SeatPauseError";
 		this.resumeAt = resumeAt;
+		this.detail = detail;
 	}
 };
 /** One logical node's durable chain. The spawn journal is the sole transition authority. */
@@ -3895,8 +3945,8 @@ var SeatChain = class {
 			}
 			return active;
 		}
-		const recheckAt = Math.max(earliestReset ?? 0, this.now() + 12e4);
-		throw new SeatChainExhaustedError(new Date(recheckAt).toISOString());
+		const recheckAt = Math.max(earliestReset ?? 0, this.now() + SEAT_RECHECK_MS);
+		throw new SeatPauseError(new Date(recheckAt).toISOString());
 	}
 	async close(reason) {
 		const events = (await this.journal.loadTree(this.rootId) ?? []).filter((event) => event.kind === "seat-segment" && event.id === this.nodeId);
@@ -8602,6 +8652,7 @@ const outsideKinds = /* @__PURE__ */ new Set([
 	"environment-teardown",
 	"environment-terminal",
 	"workspace-checkpoint-requested",
+	"workspace-checkpoint-refused",
 	"workspace-checkpoint",
 	"workspace-checkpoint-fork-requested",
 	"workspace-checkpoint-fork-ready",
@@ -9062,16 +9113,17 @@ function pendingCheckpoints(events, state) {
 // src/runtime/supervise/retained-owner-checkpoint-capture.ts
 /**
 * Delete checkpoints, each only after its files are captured into the run's content-addressed
-* store; a checkpoint no capture holds is kept, and the cleanup record says why. Only the
+* store; a checkpoint no capture holds is kept, and the cleanup record says why. `uncapturable`
+* deletes one anyway when no capture port exists: the record then names no digest. Only the
 * source-scoped handle can fork a checkpoint and attest its deletion, including after its source
 * is lost. `parent` cancels the captures (the owner's scope during rotation); each provider
 * operation also has its own bound.
 */
-async function cleanCheckpoints(state, branching, checkpoints, events, parent) {
+async function cleanCheckpoints(state, branching, checkpoints, events, parent, uncapturable = false) {
 	const unconfirmed = [];
 	const refused = [];
 	for (const event of checkpoints) {
-		const captured = await captureBeforeCleanup(state, branching, event, events, parent);
+		const captured = await captureBeforeCleanup(state, branching, event, events, parent, uncapturable);
 		if ("reason" in captured) {
 			state.captureRefused ??= /* @__PURE__ */ new Set();
 			state.captureRefused.add(event.checkpoint.checkpointId);
@@ -9115,7 +9167,7 @@ async function cleanCheckpoints(state, branching, checkpoints, events, parent) {
 			environmentId: event.environmentId,
 			checkpointId: event.checkpoint.checkpointId,
 			confirmed,
-			capturedDigest: captured.digest,
+			...captured.digest === void 0 ? {} : { capturedDigest: captured.digest },
 			seq: state.nextSequence(),
 			at: new Date(state.args.now()).toISOString()
 		});
@@ -9133,7 +9185,7 @@ async function cleanCheckpoints(state, branching, checkpoints, events, parent) {
 * destroyed once the capture is journaled, so neither a failure nor a crash leaves it running
 * unrecorded.
 */
-async function captureBeforeCleanup(state, branching, event, events, parent) {
+async function captureBeforeCleanup(state, branching, event, events, parent, uncapturable = false) {
 	const { args } = state;
 	const checkpointId = event.checkpoint.checkpointId;
 	const recorded = events.find((prior) => prior.kind === "workspace-checkpoint-capture" && prior.id === args.nodeId && prior.provider === event.provider && prior.environmentId === event.environmentId && prior.checkpointId === checkpointId);
@@ -9144,7 +9196,7 @@ async function captureBeforeCleanup(state, branching, event, events, parent) {
 		needsSource
 	});
 	const capture = state.checkpointCapture;
-	if (capture?.port.captureCheckpoint === void 0) return refuse("no checkpoint capture: the owner backend has no captureCheckpoint", false);
+	if (capture?.port.captureCheckpoint === void 0) return uncapturable ? {} : refuse("no checkpoint capture: the owner backend has no captureCheckpoint", false);
 	const provider = state.provider;
 	if (provider?.get === void 0) return refuse("the provider cannot reconstruct a fork of the checkpoint", false);
 	const get = provider.get.bind(provider);
@@ -9339,8 +9391,8 @@ function scopeRetainedOwnerJournalRoot(scope) {
 }
 /**
 * Bind cleanup before replay can return an already accepted owner result. `checkpointCapture` is
-* where each checkpoint's files are stored before the checkpoint is deleted; without it, no
-* checkpoint of this owner is deleted.
+* where each checkpoint's files are stored before the checkpoint is deleted; without it, a
+* checkpoint of this owner is deleted only when a provider refuses a newer one.
 */
 function bindScopeRetainedOwnerProvider(scope, provider, checkpointCapture) {
 	const state = owners.get(scope);
@@ -9413,6 +9465,23 @@ async function checkpointOwnerWorkspace(scope, state) {
 		state.checkpointsUnavailable = `environment ${environment.id} offers no durable checkpoint`;
 		return;
 	}
+	const requestOne = () => requestCheckpoint(scope, state, provider.name, environment, branching, source, signal);
+	if (!await requestOne() && (!await deleteOldestUncapturable(state, branching, environment.id, signal) || !await requestOne())) return;
+	const events = await args.journal.loadTree(args.rootId) ?? [];
+	const owned = pendingCheckpoints(events, state).filter((event) => event.environmentId === environment.id && state.captureRefused?.has(event.checkpoint.checkpointId) !== true);
+	const rotation = new AbortController();
+	state.rotationCaptures = rotation;
+	const timer = setTimeout(() => rotation.abort(/* @__PURE__ */ new Error(`the rotation's ${WORKSPACE_CHECKPOINT_ROTATION_CAPTURES_MS} ms for checkpoint captures ran out; checkpoint kept`)), WORKSPACE_CHECKPOINT_ROTATION_CAPTURES_MS);
+	try {
+		await cleanCheckpoints(state, branching, owned.slice(0, -2), events, AbortSignal.any([scope.signal, rotation.signal]));
+	} finally {
+		clearTimeout(timer);
+		if (state.rotationCaptures === rotation) delete state.rotationCaptures;
+	}
+}
+/** Ask for one checkpoint and journal the answer. True when the journal holds the checkpoint. */
+async function requestCheckpoint(scope, state, providerName, environment, branching, source, signal) {
+	const { args } = state;
 	const seq = state.nextSequence();
 	const at = new Date(args.now()).toISOString();
 	const name = `owner-checkpoint-${seq}`;
@@ -9439,7 +9508,7 @@ async function checkpointOwnerWorkspace(scope, state) {
 	await args.journal.appendEvent(args.rootId, {
 		kind: "workspace-checkpoint-requested",
 		id: args.nodeId,
-		provider: provider.name,
+		provider: providerName,
 		environmentId: environment.id,
 		request,
 		...marked ? { marker } : {},
@@ -9447,30 +9516,46 @@ async function checkpointOwnerWorkspace(scope, state) {
 		at
 	});
 	const result = await runAbortable(() => branching.checkpoint(request, { signal }), signal, "retained owner checkpoint timed out");
-	if (result.status !== "created" && result.status !== "replayed") return;
-	if (!workspaceCheckpointResultMatchesRequest(request, result)) return;
+	if (result.status !== "created" && result.status !== "replayed") {
+		await args.journal.appendEvent(args.rootId, {
+			kind: "workspace-checkpoint-refused",
+			id: args.nodeId,
+			provider: providerName,
+			environmentId: environment.id,
+			idempotencyKey: request.idempotencyKey,
+			message: errorText("message" in result ? result.message : result.status),
+			seq: state.nextSequence(),
+			at
+		});
+		return false;
+	}
+	if (!workspaceCheckpointResultMatchesRequest(request, result)) return false;
 	scope.signal.throwIfAborted();
 	await args.journal.appendEvent(args.rootId, {
 		kind: "workspace-checkpoint",
 		id: args.nodeId,
-		provider: provider.name,
+		provider: providerName,
 		environmentId: environment.id,
 		checkpoint: result.checkpoint,
 		...marked ? { marker } : {},
 		seq: state.nextSequence(),
 		at
 	});
-	const events = await args.journal.loadTree(args.rootId) ?? [];
-	const owned = pendingCheckpoints(events, state).filter((event) => event.environmentId === environment.id && state.captureRefused?.has(event.checkpoint.checkpointId) !== true);
-	const rotation = new AbortController();
-	state.rotationCaptures = rotation;
-	const timer = setTimeout(() => rotation.abort(/* @__PURE__ */ new Error(`the rotation's ${WORKSPACE_CHECKPOINT_ROTATION_CAPTURES_MS} ms for checkpoint captures ran out; checkpoint kept`)), WORKSPACE_CHECKPOINT_ROTATION_CAPTURES_MS);
-	try {
-		await cleanCheckpoints(state, branching, owned.slice(0, -2), events, AbortSignal.any([scope.signal, rotation.signal]));
-	} finally {
-		clearTimeout(timer);
-		if (state.rotationCaptures === rotation) delete state.rotationCaptures;
-	}
+	return true;
+}
+/**
+* Delete this environment's oldest checkpoint beyond {@link WORKSPACE_CHECKPOINTS_KEPT} when no
+* capture could ever hold its files, to make room for a newer one. Keeping them all stopped the
+* restore point instead: zro-game-20261104b's box stored 25 of its 61 requests, its plan's limit,
+* and its last restore point was 7 h old. A backend that captures deletes through its rotation.
+*/
+async function deleteOldestUncapturable(state, branching, environmentId, signal) {
+	if (state.checkpointCapture?.port.captureCheckpoint !== void 0) return false;
+	const events = await state.args.journal.loadTree(state.args.rootId) ?? [];
+	const oldest = pendingCheckpoints(events, state).filter((event) => event.environmentId === environmentId).slice(0, -2).slice(0, 1);
+	if (oldest.length === 0) return false;
+	const { unconfirmed } = await cleanCheckpoints(state, branching, oldest, events, signal, true);
+	return unconfirmed.length === 0;
 }
 /**
 * The owner's workspace-capture journal writers. A turn's capture starting cuts short the
@@ -10955,27 +11040,28 @@ function scopeRetainedOwnerResourceReader(scope) {
 }
 // src/runtime/supervise/retained-owner-seat-switch.ts
 /** A committed turn is the seat boundary. Keep its native home for a same-harness provider
-* continuation; only a provider/harness change needs a new environment. */
+* continuation; only a provider/harness change needs a new environment, and a checkpoint of the
+* old one, whose time it returns. */
 async function prepareScopeRetainedOwnerSeatSwitch(scope, mode) {
 	const state = owners.get(scope);
 	if (!state?.acceptedRef || !state.acceptedConsumed) throw new ValidationError("seat switch requires a committed owner turn");
 	const accepted = state.acceptedRef;
 	const owned = await checkpointOwner(scope, state);
+	if (mode === "same-environment") return void 0;
 	const acceptedIndex = owned.findIndex((event) => event.kind === "execution-result" && event.seq === accepted.seq && event.outRef === accepted.outRef);
 	if (acceptedIndex < 0) throw new ValidationError("seat switch has no committed result in its journal");
 	const source = owned.slice(0, acceptedIndex).reverse().find((event) => event.kind === "execution-admitted" && event.admission.phase === "environment");
 	const sourceEnvironmentId = source?.kind === "execution-admitted" && source.admission.phase === "environment" ? source.admission.environmentId : void 0;
-	const checkpoint = owned.slice(acceptedIndex + 1).reverse().find((event) => event.kind === "workspace-checkpoint" && event.environmentId === sourceEnvironmentId);
-	if (checkpoint?.kind !== "workspace-checkpoint") throw new ValidationError("seat switch requires a checkpoint of its committed source");
-	if (mode === "replace-environment") {
-		await retireCheckpointed(scope, state, owned, checkpoint, "seat changed");
-		state.forceNewSession = true;
+	const since = owned.slice(acceptedIndex + 1).reverse();
+	const checkpoint = since.find((event) => event.kind === "workspace-checkpoint" && event.environmentId === sourceEnvironmentId);
+	if (checkpoint?.kind !== "workspace-checkpoint") {
+		const refusal = since.find((event) => event.kind === "workspace-checkpoint-refused");
+		const why = state.checkpointsUnavailable ?? (refusal?.kind === "workspace-checkpoint-refused" ? refusal.message : "none was taken");
+		throw new ValidationError(`no checkpoint of its committed source: ${why}`);
 	}
-	return {
-		checkpointAt: checkpoint.at,
-		checkpointId: checkpoint.checkpoint.checkpointId,
-		sourceEnvironmentId: checkpoint.environmentId
-	};
+	await retireCheckpointed(scope, state, owned, checkpoint, "seat changed");
+	state.forceNewSession = true;
+	return checkpoint.at;
 }
 /** An exhausted seat chain pauses its manager until `resumeAt` with no turn to run: on
 * magnetar-rust-sandbox-20261031b (Runtime 3.0.5) a resume paused four managers until 11-04 with
@@ -12741,7 +12827,7 @@ function createChildRetention({ args, controller, id, ordinal, identity, recover
 }
 /** Whether a settled spend exceeds the budget it was given, by the channels the pool reconciles. */
 function overBudget(budget, spent) {
-	return chargedTokens(spent.tokens) > budget.maxTokens || spent.iterations > budget.maxIterations || budget.maxUsd !== void 0 && spent.usdKnown !== false && spent.usd > budget.maxUsd;
+	return budget.maxTokens !== void 0 && chargedTokens(spent.tokens) > budget.maxTokens || budget.maxIterations !== void 0 && spent.iterations > budget.maxIterations || budget.maxUsd !== void 0 && spent.usdKnown !== false && spent.usd > budget.maxUsd;
 }
 // src/durable/spawn-journal/record-events.ts
 /** Decode the file journal's historical single-event and atomic-group envelopes. @internal */
@@ -14692,12 +14778,18 @@ function reservedCursorFloor(events) {
 function sumSpendFromEvents(events) {
 	const totals = sumMeasuredSpendFromEvents(events);
 	const rootBudget = events.find((event) => event.kind === "spawned" && event.parent === void 0)?.budget;
+	let remainingRootTokens = Math.max(0, (rootBudget?.maxTokens ?? 0) - chargedTokens(totals.childWork.tokens) - chargedTokens(totals.driverInference.tokens));
+	let remainingRootIterations = Math.max(0, (rootBudget?.maxIterations ?? 0) - totals.childWork.iterations - totals.driverInference.iterations);
 	let remainingRootUsd = Math.max(0, (rootBudget?.maxUsd ?? 0) - totals.childWork.usd - totals.driverInference.usd);
 	for (const budget of uncertainSpawnBudgets(events)) {
 		const unknown = withBudgetResources(zeroSpend(), budget);
 		Object.assign(totals.childWork, addResourceSpend(totals.childWork.resources, unknown.resources));
-		totals.childWork.iterations += budget.maxIterations;
-		totals.childWork.tokens.input += budget.maxTokens;
+		const iterationCharge = budget.maxIterations ?? remainingRootIterations;
+		totals.childWork.iterations += iterationCharge;
+		remainingRootIterations = Math.max(0, remainingRootIterations - iterationCharge);
+		const tokenCharge = budget.maxTokens ?? remainingRootTokens;
+		totals.childWork.tokens.input += tokenCharge;
+		remainingRootTokens = Math.max(0, remainingRootTokens - tokenCharge);
 		totals.childWork.tokensKnown = false;
 		const usdCharge = budget.maxUsd ?? (rootBudget?.maxUsd !== void 0 ? remainingRootUsd : 0);
 		totals.childWork.usd += usdCharge;
@@ -16146,7 +16238,7 @@ var ScopeSpawner = class {
 		const { recovery, opts } = request;
 		const child = this.admit(request, reuse, ticket);
 		const { id, continuing } = child;
-		const controller = this.armChildAbort(child, cleanup);
+		const controller = this.armChildAbort(child, cleanup, permit);
 		const deferredOwner = {};
 		const workerTrace = args.workerTrace?.(args.parentId);
 		const { recoveryReady, markRecoveryReady } = recoveryReadyGate(recovery, budgetGranted);
@@ -16267,20 +16359,24 @@ var ScopeSpawner = class {
 	}
 	/**
 	* The child's abort chains off this scope's signal AND its own handle.abort() or bounded
-	* deadline; aborting mid-acquire cascades into acquireSandbox's find-by-name reap.
+	* deadline; aborting mid-acquire cascades into acquireSandbox's find-by-name reap. A live child's
+	* time box counts from its grant, not its spawn: queue time is not its time (zro-game-20261104a
+	* s15-s20 expired queued, execution-did-not-start). A recovered child keeps its journaled grant.
 	*/
-	armChildAbort(child, cleanup) {
+	armChildAbort(child, cleanup, permit) {
 		const { args, now } = this.deps;
 		const { id, childDeadlineAtMs } = child;
 		const controller = new AbortController();
 		cleanup.cascadeAbort = () => controller.abort(args.signal.reason);
 		if (args.signal.aborted) controller.abort(args.signal.reason);
 		else args.signal.addEventListener("abort", cleanup.cascadeAbort, { once: true });
-		if (childDeadlineAtMs !== void 0) {
-			const runDeadlineAtMs = args.depth === 0 ? args.pool.readout().deadlineMs : 0;
-			const timeBox = !(runDeadlineAtMs > 0 && childDeadlineAtMs >= runDeadlineAtMs);
+		const runDeadlineAtMs = args.depth === 0 ? args.pool.readout().deadlineMs : 0;
+		let cleared = false;
+		const arm = (deadlineAtMs) => {
+			if (deadlineAtMs === void 0 || cleared) return;
+			const timeBox = !(runDeadlineAtMs > 0 && deadlineAtMs >= runDeadlineAtMs);
 			let clearCheckIn;
-			const clearTimer = armDeadlineTimer(Math.max(0, childDeadlineAtMs - now()), () => {
+			const clearTimer = armDeadlineTimer(Math.max(0, deadlineAtMs - now()), () => {
 				clearCheckIn = timeBox ? this.deps.checkInAtTimeBox(id, controller) : void 0;
 				if (clearCheckIn === void 0) controller.abort(CHILD_DEADLINE_REASON);
 			});
@@ -16288,6 +16384,13 @@ var ScopeSpawner = class {
 				clearTimer();
 				clearCheckIn?.();
 			};
+		};
+		if (child.recovery !== void 0 || child.opts.budget.deadlineMs === void 0) arm(childDeadlineAtMs);
+		else {
+			cleanup.clearChildDeadline = () => {
+				cleared = true;
+			};
+			permit.ready.then(() => arm(boundedChildDeadlineAt(args.pool.readout().deadlineMs, child.opts.budget.deadlineMs, now())), () => void 0);
 		}
 		return controller;
 	}
@@ -16715,8 +16818,8 @@ function reservationOwnerFloor(args) {
 	if (reservationPolicy && !args.ownerBudget) throw new ValidationError("reservationPolicy requires the owning scope budget");
 	const ownerBudget = args.ownerBudget;
 	return reservationPolicy && ownerBudget ? {
-		tokens: Math.ceil(ownerBudget.maxTokens * reservationPolicy.ownerShare),
-		iterations: Math.ceil(ownerBudget.maxIterations * reservationPolicy.ownerShare),
+		tokens: Math.ceil((ownerBudget.maxTokens ?? 0) * reservationPolicy.ownerShare),
+		iterations: Math.ceil((ownerBudget.maxIterations ?? 0) * reservationPolicy.ownerShare),
 		...ownerBudget.maxUsd === void 0 ? {} : { usd: ownerBudget.maxUsd * reservationPolicy.ownerShare }
 	} : void 0;
 }
@@ -16795,6 +16898,6 @@ async function recoverRetainedChildren(args, children, spawn, next) {
 		throw error;
 	}
 }
-export { deriveNodeExecutionIdentity as $, assertEventBinding as $i, persistHarnessTranscript as $n, DISPATCH_NOT_ADMITTED_CODE as $r, insideCursorNamespace as $t, nestedScopeSeamKey as A, mapSandboxEvent as Ai, workerTraceEnv as An, recordRuntimeOwnedProviderDispatchNotStarted as Ar, beginScopeRetainedOwnerDrive as At, beginScopeOwnerAttempt as B, createSandboxTurnEventCollector as Bi, flatOtelSpan as Bn, unknownMaterializationReceipt as Br, retainedOwnerWorkspaceRetentionSeamKey as Bt, writeWorkerSteerAcknowledgement as C, createBudgetPool as Ci, nativeCopyDelayMs as Cn, inheritRuntimeOwnedExecutorAttestation as Cr, environmentReader as Ct, isTraceAnalysisStore as D, spendFromUsageTotals as Di, openSlotGroup as Dn, providerAttemptEvidence as Dr, prepareScopeRetainedOwnerTask as Dt, replaySpawnTree as E, spendFromUsageEvents as Ei, createWorkerSlots as En, newExecutionAttemptId as Er, consumeScopeRetainedOwnerResult as Et, recoverRetainedInteractiveRun as F, terminalTextFromSandboxEvent as Fi, buildLoopOtelSpans as Fn, runtimeOwnedExecutorMaterialization as Fr, scopeRetainedOwnerRestorePoint as Ft, scopeOwnerExecutorNodeContext as G, sameModelId as Gi, sanitizeKnowledgeReadinessReport as Gn, runtimeFlowBrain as Gr, materializeTreeView as Gt, noteScopeOwnerPlannedExecution as H, extractLlmCallEvent as Hi, loopEventToOtelSpan as Hn, executableAgentSpecSnapshot as Hr, scopeRetainedOwnerJournalRoot as Ht, startRetainedInteractiveRun as I, canonicalStreamEventFromSandboxEvent as Ii, buildLoopSpanNodes as In, runtimeOwnedExecutorProviderEvidence as Ir, noteScopeRetainedOwnerCoordination as It, providerVisibleProfile as J, sumSandboxUsage as Ji, captureBoundHarnessTranscript as Jn, runtimeFailureCauseSchema as Jr, nestedDriverTreeRoot as Jt, coordinationMcpAlias as K, sandboxEventServedBackend as Ki, sanitizeRuntimeStreamEvent as Kn, reportedFailureCause as Kr, attestNestedDriverTreeOwner as Kt, FileSpawnJournal as L, extractTransportEventIdentity as Li, buildRuntimeEventOtelSpans as Ln, runtimeOwnedPendingExecutorMaterialization as Lr, scopeRetainedOwnerCheckpointing as Lt, attachWorker as M, sandboxLeafOutputFromEvents as Mi, createPropagatingTraceEmitter as Mn, recordRuntimeOwnedProviderModel as Mr, scopeRetainedOwnerTurnEnded as Mt, readWorkerInteractiveBinding as N, sandboxOutputMarker as Ni, mergeTraceEnv as Nn, runtimeOwnedDriveHarnessProviderEvidence as Nr, assertRetainedOwnerCoordinationRekey as Nt, parseWorkerToolTraceArtifact as O, assertValidBudget as Oi, resolveWorkerSlots as On, recordRuntimeOwnedDriveHarnessProviderEvidence as Or, scopeRetainedOwnerPriorSpend as Ot, reconnectRetainedInteractiveRun as P, sandboxProgressEvents as Pi, readTraceContextFromEnv as Pn, runtimeOwnedExecutorExecutionBinding as Pr, reconcileScopeRetainedOwnerEnvironment as Pt, assertRecursiveReservationPolicy as Q, RetainedRunProviderContractError as Qi, harnessTranscriptUnavailable as Qn, DISPATCH_EXECUTION_CHANGED_CODE as Qr, closesCursorSlot as Qt, appendSpawnEvents as R, assertSandboxServedModel as Ri, createOpenInferenceFileExporter as Rn, runtimeOwnedScopeOwnerRuntime as Rr, bindScopeRetainedOwnerEnvironmentId as Rt, writeWorkerSteer as S, isCredentialRefusal as Si, captureProviderWorkspaceSnapshot as Sn, finalizeRuntimeOwnedPendingExecutor as Sr, scopeRetainedOwnerResourceReader as St, sumSpendFromEvents as T, newUsageTotals as Ti, workspaceCaptureReceipt as Tn, knownMaterializationReceipt as Tr, abandonScopeRetainedOwnerInvocation as Tt, recordScopeOwnerMaterialization as U, isSandboxTerminalEvent as Ui, createRuntimeEventCollector as Un, isRuntimeFlowBrain as Ur, loadSpawnForest as Ut, finalizeScopeOwnerMaterialization as V, createSandboxUsageLedger as Vi, generateSpanId as Vn, executableAgentProfileSnapshot as Vr, scopeRetainedOwnerContext as Vt, restoreScopeOwnerAcceptedExecution as W, notifySandboxEventObserver as Wi, createRuntimeStreamEventCollector as Wn, runtimeFlowAgent as Wr, ownedTreeRootSpawn as Wt, reenteredWorkers as X, parseCodexUsageRecord as Xi, harnessTranscriptArtifact as Xn, runtimeProviderCode as Xr, encodeResultBlob as Xt, runtimeGraphMetadataKey as Y, decodeHarnessUsage as Yi, captureHarnessTranscript as Yn, runtimeFailureRemediationSchema as Yr, FileResultBlobStore as Yt, settledToIteration as Z, recordValue as Zi, harnessTranscriptFromLines as Zn, settlementFailureCause as Zr, SpawnEventIndex as Zt, supervisorRunDir as _, contentAddress as _i, destroyInteractiveEnvironment as _n, attestRuntimeOwnedExecutor as _r, startScopeRecoveries as _t, readRootStream as a, RunCancellationReason as aa, retainedExecutorContext as ai, reconnectRetainedRun as an, DEFAULT_STALL_AFTER_MS as ar, hasRetriableTeardowns as at, workerInboxFileFromEventDir as b, hashJson as bi, assertProviderWorkspaceRetentionPort as bn, authoredAgentIdentity as br, prepareScopeRetainedOwnerSeatSwitch as bt, cancelWorker as c, runAbortable as ca, UNAVAILABLE_STATUSES as ci, startRetainedRunInEnvironment as cn, readWorkerProgress as cr, recordScopeOwnerBarrenPause as ct, legacySupervisorRunsRoot as d, promptOptionsFromAgentTurnInput as da, printedStatus as di, offerInteractiveControl as dn, SeatChain as dr, registerNestedTeardownScope as dt, awaitAbortable$1 as ea, RetainedExecutionPendingError as ei, verifyWorkspaceMarker as en, readHarnessTranscript as er, freeSlots as et, readWorkerCancelRequests as f, providerMessageText as fa, unavailablePauseMs as fi, prepareInteractiveDelegation as fn, SeatChainExhaustedError as fr, releaseHeldEnvironments as ft, safeWorkerFile as g, TRACE_SUMMARY_SCHEMA as gi, verifyObserverRecords as gn, attestRuntimeOwnedDeferredExecutor as gr, settleManagerWork as gt, readWorkerSteerRequests as h, TRACE_ROOT_SCHEMA as hi, observerRecordDigest as hn, subscriptionUsageLimitSignal as hr, retryUnconfirmedTeardowns as ht, nodeStreamFile as i, sameControlCoordinates as ia, registerRetainedExecutorPreparation as ii, mintRetainedIdentity as in, retainHarnessTranscript as ir, closeScopeAdmission as it, interactiveAdmissionSeamKey as j, mapSandboxToolEvent as ji, workerTraceHeaders as jn, recordRuntimeOwnedProviderIdentityConflict as jr, scopeRetainedOwnerSettled as jt, workerTraceAnalysisStore as k, createSandboxToolPartState as ki, WORKER_TRACE_PROPAGATION as kn, recordRuntimeOwnedProviderAttemptStart as kr, scopeRetainedOwnerResult as kt, claimWorkerSteerDelivery as l, signalAbortError as la, cappedDoublingMs as li, retainedCreateMaterial as ln, isLiveNodeStatus as lr, recordScopeOwnerDriverAttempt as lt, readWorkerSteerAcknowledgement as m, unavailableSignalOfFailure as mi, createFileObserverHooks as mn, seatExecutionProfile as mr, releaseRetainedEnvironments as mt, ROOT_STREAM_FILE as n, freezeControlRef as na, isProvisioningRefusal as ni, stopRetainedNativeExecution as nn, readBoundHarnessSessions as nr, rollingDispatch as nt, readRootStreamReceipt as o, abortReason as oa, retainedExecutorSeamKey as oi, recoverRetainedRun as on, createActivityLog as or, meterRuntimeOwnedAccounting as ot, readWorkerCancellation as p, unavailableResumeAt as pi, FileObserverJournal as pn, authoredSeatStages as pr, releaseManagerEnvironment as pt, coordinationProfileToolPrefix as q, sandboxTerminalUsageField as qi, HARNESS_TRANSCRIPT_SETTLE_TIMEOUT_MS as qn, runtimeFailureCause as qr, driverRuntime as qt, createRootStreamSink as r, isTerminalSessionStatus as ra, isSchemaRejection as ri, assertRetainedRunReplayMaterial as rn, resolveHarnessTranscriptCapture as rr, closeRetainedSlots as rt, appendWorkerControlEvent as s, linkAbort as sa, UNAVAILABLE_CODES as si, startRetainedRun as sn, describeToolArgs as sr, meterRuntimeOwnedProviderAttempt as st, createScope as t, exactSession as ta, TRANSPORT_ERROR_CODES as ti, describeRetainedNativeStops as tn, HARNESS_TRANSCRIPT_READ_LIMITS as tr, queueOf as tt, legacySupervisorRunDir as u, promptFromAgentTurnInput as ua, jitteredMs as ui, acceptedInteractiveControl as un, isTerminalNodeStatus as ur, recordScopeOwnerPause as ut, supervisorRunsRoot as v, contentRef as vi, environmentGone as vn, attestRuntimeOwnedPendingExecutor as vr, unconfirmedTeardowns as vt, prepareScopeResume as w, meterUsageEvent as wi, openNativeMirror as wn, knownExecutionBindingReceipt as wr, resolveSpawnResourcePaths as wt, writeWorkerCancellation as x, credentialCommandExit as xi, captureProviderLiveWorkspace as xn, authoredProfileDigest as xr, releaseScopeRetainedOwnerForSeatPause as xt, workerCancellationsDir as y, executorFailure as yi, DEFAULT_NATIVE_CAPTURE_INTERVAL_MS as yn, attestRuntimeOwnedScopeOwner as yr, waitForScopeChildren as yt, spawnJournalRecordEvents as z, canonicalSandboxUsageMode as zi, createOtelExporter as zn, unknownExecutionBindingReceipt as zr, bindScopeRetainedOwnerProvider as zt };
+export { deriveNodeExecutionIdentity as $, sandboxEventServedBackend as $i, harnessTranscriptUnavailable as $n, runtimeProviderCode as $r, closesCursorSlot as $t, nestedScopeSeamKey as A, createBudgetPool as Ai, WORKER_TRACE_PROPAGATION as An, recordRuntimeOwnedDriveHarnessProviderEvidence as Ar, beginScopeRetainedOwnerDrive as At, beginScopeOwnerAttempt as B, sandboxOutputMarker as Bi, createOtelExporter as Bn, runtimeOwnedScopeOwnerControl as Br, bindScopeRetainedOwnerWorkspaceRetention as Bt, writeWorkerSteerAcknowledgement as C, executorFailure as Ci, captureProviderWorkspaceSnapshot as Cn, authoredProfileDigest as Cr, environmentReader as Ct, isTraceAnalysisStore as D, hashJson as Di, createWorkerSlots as Dn, knownMaterializationReceipt as Dr, prepareScopeRetainedOwnerTask as Dt, replaySpawnTree as E, turnFailurePolicy as Ei, workspaceCaptureReceipt as En, knownExecutionBindingReceipt as Er, consumeScopeRetainedOwnerResult as Et, recoverRetainedInteractiveRun as F, assertValidBudget as Fi, readTraceContextFromEnv as Fn, runtimeOwnedDriveHarnessProviderEvidence as Fr, scopeRetainedOwnerRestorePoint as Ft, scopeOwnerExecutorNodeContext as G, assertSandboxServedModel as Gi, createRuntimeStreamEventCollector as Gn, executableAgentSpecSnapshot as Gr, ownedTreeRootSpawn as Gt, noteScopeOwnerPlannedExecution as H, terminalTextFromSandboxEvent as Hi, generateSpanId as Hn, unknownExecutionBindingReceipt as Hr, scopeRetainedOwnerContext as Ht, startRetainedInteractiveRun as I, createSandboxToolPartState as Ii, buildLoopOtelSpans as In, runtimeOwnedExecutorExecutionBinding as Ir, noteScopeRetainedOwnerCoordination as It, providerVisibleProfile as J, createSandboxUsageLedger as Ji, HARNESS_TRANSCRIPT_SETTLE_TIMEOUT_MS as Jn, runtimeFlowBrain as Jr, driverRuntime as Jt, coordinationMcpAlias as K, canonicalSandboxUsageMode as Ki, sanitizeKnowledgeReadinessReport as Kn, isRuntimeFlowBrain as Kr, materializeTreeView as Kt, FileSpawnJournal as L, mapSandboxEvent as Li, buildLoopSpanNodes as Ln, runtimeOwnedExecutorMaterialization as Lr, scopeRetainedOwnerCheckpointing as Lt, attachWorker as M, newUsageTotals as Mi, workerTraceHeaders as Mn, recordRuntimeOwnedProviderDispatchNotStarted as Mr, scopeRetainedOwnerTurnEnded as Mt, readWorkerInteractiveBinding as N, spendFromUsageEvents as Ni, createPropagatingTraceEmitter as Nn, recordRuntimeOwnedProviderIdentityConflict as Nr, assertRetainedOwnerCoordinationRekey as Nt, parseWorkerToolTraceArtifact as O, credentialCommandExit as Oi, openSlotGroup as On, newExecutionAttemptId as Or, scopeRetainedOwnerPriorSpend as Ot, reconnectRetainedInteractiveRun as P, spendFromUsageTotals as Pi, mergeTraceEnv as Pn, recordRuntimeOwnedProviderModel as Pr, reconcileScopeRetainedOwnerEnvironment as Pt, assertRecursiveReservationPolicy as Q, sameModelId as Qi, harnessTranscriptFromLines as Qn, runtimeFailureRemediationSchema as Qr, SpawnEventIndex as Qt, appendSpawnEvents as R, mapSandboxToolEvent as Ri, buildRuntimeEventOtelSpans as Rn, runtimeOwnedExecutorProviderEvidence as Rr, bindScopeRetainedOwnerEnvironmentId as Rt, writeWorkerSteer as S, contentRef as Si, captureProviderLiveWorkspace as Sn, authoredAgentIdentity as Sr, scopeRetainedOwnerResourceReader as St, sumSpendFromEvents as T, turnFailureOf as Ti, openNativeMirror as Tn, inheritRuntimeOwnedExecutorAttestation as Tr, abandonScopeRetainedOwnerInvocation as Tt, recordScopeOwnerMaterialization as U, canonicalStreamEventFromSandboxEvent as Ui, loopEventToOtelSpan as Un, unknownMaterializationReceipt as Ur, scopeRetainedOwnerJournalRoot as Ut, finalizeScopeOwnerMaterialization as V, sandboxProgressEvents as Vi, flatOtelSpan as Vn, runtimeOwnedScopeOwnerRuntime as Vr, retainedOwnerWorkspaceRetentionSeamKey as Vt, restoreScopeOwnerAcceptedExecution as W, extractTransportEventIdentity as Wi, createRuntimeEventCollector as Wn, executableAgentProfileSnapshot as Wr, loadSpawnForest as Wt, reenteredWorkers as X, isSandboxTerminalEvent as Xi, captureHarnessTranscript as Xn, runtimeFailureCause as Xr, FileResultBlobStore as Xt, runtimeGraphMetadataKey as Y, extractLlmCallEvent as Yi, captureBoundHarnessTranscript as Yn, reportedFailureCause as Yr, nestedDriverTreeRoot as Yt, settledToIteration as Z, notifySandboxEventObserver as Zi, harnessTranscriptArtifact as Zn, runtimeFailureCauseSchema as Zr, encodeResultBlob as Zt, supervisorRunDir as _, promptFromAgentTurnInput as _a, unavailableResumeAt as _i, verifyObserverRecords as _n, subscriptionUsageLimitSignal as _r, startScopeRecoveries as _t, readRootStream as a, RetainedRunProviderContractError as aa, isProvisioningRefusal as ai, mintRetainedIdentity as an, retainHarnessTranscript as ar, hasRetriableTeardowns as at, workerInboxFileFromEventDir as b, TRACE_SUMMARY_SCHEMA as bi, DEFAULT_NATIVE_CAPTURE_INTERVAL_MS as bn, attestRuntimeOwnedPendingExecutor as br, prepareScopeRetainedOwnerSeatSwitch as bt, cancelWorker as c, exactSession as ca, retainedExecutorContext as ci, startRetainedRun as cn, describeToolArgs as cr, recordScopeOwnerBarrenPause as ct, legacySupervisorRunsRoot as d, sameControlCoordinates as da, UNAVAILABLE_STATUSES as di, acceptedInteractiveControl as dn, isTerminalNodeStatus as dr, registerNestedTeardownScope as dt, sandboxTerminalUsageField as ea, settlementFailureCause as ei, insideCursorNamespace as en, persistHarnessTranscript as er, freeSlots as et, readWorkerCancelRequests as f, RunCancellationReason as fa, cappedDoublingMs as fi, offerInteractiveControl as fn, SEAT_RECHECK_MS as fr, releaseHeldEnvironments as ft, safeWorkerFile as g, signalAbortError as ga, unavailablePauseMs as gi, observerRecordDigest as gn, seatExecutionProfile as gr, settleManagerWork as gt, readWorkerSteerRequests as h, runAbortable as ha, reportedResetAt as hi, createFileObserverHooks as hn, authoredSeatStages as hr, retryUnconfirmedTeardowns as ht, nodeStreamFile as i, recordValue as ia, TRANSPORT_ERROR_CODES as ii, assertRetainedRunReplayMaterial as in, resolveHarnessTranscriptCapture as ir, closeScopeAdmission as it, interactiveAdmissionSeamKey as j, meterUsageEvent as ji, workerTraceEnv as jn, recordRuntimeOwnedProviderAttemptStart as jr, scopeRetainedOwnerSettled as jt, workerTraceAnalysisStore as k, isCredentialRefusal as ki, resolveWorkerSlots as kn, providerAttemptEvidence as kr, scopeRetainedOwnerResult as kt, claimWorkerSteerDelivery as l, freezeControlRef as la, retainedExecutorSeamKey as li, startRetainedRunInEnvironment as ln, readWorkerProgress as lr, recordScopeOwnerDriverAttempt as lt, readWorkerSteerAcknowledgement as m, linkAbort as ma, printedStatus as mi, FileObserverJournal as mn, SeatPauseError as mr, releaseRetainedEnvironments as mt, ROOT_STREAM_FILE as n, decodeHarnessUsage as na, DISPATCH_NOT_ADMITTED_CODE as ni, describeRetainedNativeStops as nn, HARNESS_TRANSCRIPT_READ_LIMITS as nr, rollingDispatch as nt, readRootStreamReceipt as o, assertEventBinding as oa, isSchemaRejection as oi, reconnectRetainedRun as on, DEFAULT_STALL_AFTER_MS as or, meterRuntimeOwnedAccounting as ot, readWorkerCancellation as p, abortReason as pa, jitteredMs as pi, prepareInteractiveDelegation as pn, SeatChain as pr, releaseManagerEnvironment as pt, coordinationProfileToolPrefix as q, createSandboxTurnEventCollector as qi, sanitizeRuntimeStreamEvent as qn, runtimeFlowAgent as qr, attestNestedDriverTreeOwner as qt, createRootStreamSink as r, parseCodexUsageRecord as ra, RetainedExecutionPendingError as ri, stopRetainedNativeExecution as rn, readBoundHarnessSessions as rr, closeRetainedSlots as rt, appendWorkerControlEvent as s, awaitAbortable$1 as sa, registerRetainedExecutorPreparation as si, recoverRetainedRun as sn, createActivityLog as sr, meterRuntimeOwnedProviderAttempt as st, createScope as t, sumSandboxUsage as ta, DISPATCH_EXECUTION_CHANGED_CODE as ti, verifyWorkspaceMarker as tn, readHarnessTranscript as tr, queueOf as tt, legacySupervisorRunDir as u, isTerminalSessionStatus as ua, UNAVAILABLE_CODES as ui, retainedCreateMaterial as un, isLiveNodeStatus as ur, recordScopeOwnerPause as ut, supervisorRunsRoot as v, promptOptionsFromAgentTurnInput as va, unavailableSignalOfFailure as vi, destroyInteractiveEnvironment as vn, attestRuntimeOwnedDeferredExecutor as vr, unconfirmedTeardowns as vt, prepareScopeResume as w, executorFailureInfra as wi, nativeCopyDelayMs as wn, finalizeRuntimeOwnedPendingExecutor as wr, resolveSpawnResourcePaths as wt, writeWorkerCancellation as x, contentAddress as xi, assertProviderWorkspaceRetentionPort as xn, attestRuntimeOwnedScopeOwner as xr, releaseScopeRetainedOwnerForSeatPause as xt, workerCancellationsDir as y, providerMessageText as ya, TRACE_ROOT_SCHEMA as yi, environmentGone as yn, attestRuntimeOwnedExecutor as yr, waitForScopeChildren as yt, spawnJournalRecordEvents as z, sandboxLeafOutputFromEvents as zi, createOpenInferenceFileExporter as zn, runtimeOwnedPendingExecutorMaterialization as zr, bindScopeRetainedOwnerProvider as zt };
 
-//# sourceMappingURL=scope-Bg1uCsPR.js.map
+//# sourceMappingURL=scope-JcCkUy_z.js.map