@tangle-network/agent-runtime 4.0.0 → 5.0.0

package/dist/{scope-CJ7xtrs8.js → scope-JcCkUy_z.js}

@@ -1,6 +1,6 @@
-import { c as RetainedInteractiveAdmissionError, d as RetainedRunDispatchBindingError, f as RuntimeRunStateError, l as RetainedInteractiveBindingError, m as ValidationError, r as BackendTransportError, u as RetainedRunAdmissionError } from "./errors-AzSuGI23.js";
+import { c as RetainedInteractiveAdmissionError, d as RetainedRunDispatchBindingError, f as RuntimeRunStateError, l as RetainedInteractiveBindingError, m as ValidationError, r as BackendTransportError, t as AgentEvalError$1, u as RetainedRunAdmissionError } from "./errors-AzSuGI23.js";
 import { $ as isAsyncIterable, Ct as boundedChildDeadlineAt, Dt as teardownExecutor, Et as singleFlightTeardown, F as deepFreezeCandidate, G as chargedTokens, H as abortError, K as cloneSpend, St as armDeadlineTimer, U as addSpend, W as addTokenUsage, X as fnv1a32Hex, Y as errorMessage, Z as hasCompleteCacheBreakdown, a as verifyAgentCandidateWorkspaceArtifacts, at as sleep, dt as zeroSpend, ft as zeroTokenUsage, g as workspaceLimits, gt as withBudgetResources, h as verifyAgentCandidateWorkspaceArchive, ht as resourceTelemetry, i as readAgentCandidateWorkspaceArtifactFiles, j as verifiedArtifactChunks, k as verifyWorkspaceSnapshotArtifacts, m as safeArchivePath, mt as assertResources, o as verifyAgentCandidateWorkspaceTree, pt as addResourceSpend, q as cloneTokenUsage, tt as promptCacheTokenClasses, vt as CHILD_DEADLINE_REASON, wt as checkInIdleMs, z as sha256Bytes$1 } from "./workspace-streams-8ALHaZzx.js";
-import { _ as errorText, a as readCommittedJsonLines, b as resolveRedactor, c as appendCommittedJsonLine, d as detachedSnapshot, f as shareParsedStrings, g as errorProperty, l as sha256, m as errMessage, p as causeChain, r as prepareJsonlAppend, s as withJsonlFileLock, t as isNoEntError, v as defaultRedactor } from "./jsonl-file-CvPuwM0a.js";
+import { _ as errorText, a as readCommittedJsonLines, b as resolveRedactor, c as appendCommittedJsonLine, d as detachedSnapshot, f as shareParsedStrings, g as errorProperty, l as sha256, m as errMessage, p as causeChain, r as prepareJsonlAppend, s as withJsonlFileLock, t as isNoEntError, v as defaultRedactor } from "./jsonl-file-CeVYTIQJ.js";
 import { t as assertExecutableAgentProfile } from "./model-policy-JOcg3NRs.js";
 import { a as writeAtomicDurableFile, n as assertNoSymlinkDescendant, o as captureRunWriteContext, r as publishExclusiveDurableFile, s as fenceRunWrite, t as appendDurableFile } from "./durable-file-DstVeHcj.js";
 import { a as withPursuitContext, i as notifyRuntimeHookEvent } from "./runtime-hooks-CsW2pfFk.js";
@@ -12,6 +12,7 @@ import { isRecord } from "@tangle-network/agent-core";
 import { collectAgentFinalMessageText, collectAgentResponseText } from "@tangle-network/sandbox";
 import { z } from "zod";
 import { redact } from "@tangle-network/agent-eval/traces";
+import { AgentTurnFailureSchema } from "@tangle-network/agent-interface/environment-provider";
 import { createHash, randomUUID } from "node:crypto";
 import { setImmediate as setImmediate$1 } from "node:timers/promises";
 import { LedgerCanonicalizationError, canonicalString, jsonDocument, merkleLeafHash, merkleRoot, merkleSalt } from "@tangle-network/agent-eval/ledger-core";
@@ -1725,8 +1726,8 @@ function assertValidBudget(budget, label = "budget") {
 		if (!Number.isFinite(value) || value < 0) throw new Error(`${label}.${field} must be a non-negative finite number`);
 	};
 	assertResources(budget.resources, "limit", `${label}.resources`);
-	safeInteger(budget.maxIterations, "maxIterations");
-	safeInteger(budget.maxTokens, "maxTokens");
+	if (budget.maxIterations !== void 0) safeInteger(budget.maxIterations, "maxIterations");
+	if (budget.maxTokens !== void 0) safeInteger(budget.maxTokens, "maxTokens");
 	if (budget.maxUsd !== void 0) finiteNonNegative(budget.maxUsd, "maxUsd");
 	if (budget.deadlineMs !== void 0) finiteNonNegative(budget.deadlineMs, "deadlineMs");
 }
@@ -1767,6 +1768,8 @@ function assertValidSpend(spend, label) {
 */
 function openBudgetLedger(root, runStartedAtMs) {
 	return {
+		tokensCapped: root.maxTokens !== void 0,
+		iterationsCapped: root.maxIterations !== void 0,
 		usdCapped: root.maxUsd !== void 0,
 		absoluteDeadlineMs: root.deadlineMs === void 0 ? 0 : runStartedAtMs + root.deadlineMs,
 		resources: new Map(Object.entries(root.resources ?? {}).map(([name, value]) => [name, {
@@ -1776,7 +1779,7 @@ function openBudgetLedger(root, runStartedAtMs) {
 			committed: 0,
 			known: true
 		}])),
-		freeTokens: root.maxTokens,
+		freeTokens: root.maxTokens ?? 0,
 		reservedTokens: 0,
 		committedTokens: 0,
 		tokensTainted: false,
@@ -1786,7 +1789,7 @@ function openBudgetLedger(root, runStartedAtMs) {
 		committedUsd: 0,
 		usdTainted: false,
 		usdMeasured: true,
-		freeIterations: root.maxIterations,
+		freeIterations: root.maxIterations ?? 0,
 		reservedIterations: 0,
 		committedIterations: 0,
 		ownerSpent: {
@@ -1853,9 +1856,9 @@ function ledgerCommitResources(l, spend, allocations, requireAll = true) {
 }
 /** Every channel `b` does not fit, measured against the free balance less `keep`. */
 function ledgerShortfalls(l, b, keep) {
-	const wantTokens = b.maxTokens;
+	const wantTokens = b.maxTokens ?? 0;
 	const wantUsd = b.maxUsd ?? 0;
-	const wantIterations = b.maxIterations;
+	const wantIterations = b.maxIterations ?? 0;
 	const shortfalls = [];
 	const short = (channel, requested, free, held, closedByUnknownSpend = false) => {
 		shortfalls.push({
@@ -1875,8 +1878,8 @@ function ledgerShortfalls(l, b, keep) {
 	const kept = (share = 0, spent) => Math.max(0, share - spent);
 	const tokensFree = l.freeTokens - kept(keep?.tokens, chargedTokens(l.ownerSpent.tokens));
 	const iterationsFree = l.freeIterations - kept(keep?.iterations, l.ownerSpent.iterations);
-	if (wantTokens > tokensFree) short("tokens", wantTokens, tokensFree, l.reservedTokens);
-	if (wantIterations > iterationsFree) short("iterations", wantIterations, iterationsFree, l.reservedIterations);
+	if (l.tokensCapped && wantTokens > tokensFree) short("tokens", wantTokens, tokensFree, l.reservedTokens);
+	if (l.iterationsCapped && wantIterations > iterationsFree) short("iterations", wantIterations, iterationsFree, l.reservedIterations);
 	const usdFree = l.freeUsd - kept(keep?.usd, l.ownerSpent.usd);
 	if (l.usdCapped && !l.usdTainted && wantUsd > usdFree) short("usd", wantUsd, usdFree, l.reservedUsd);
 	return shortfalls;
@@ -1888,10 +1891,14 @@ function ledgerTake(l, b) {
 		state.remaining -= amount;
 		state.reserved += amount;
 	}
-	l.freeTokens -= b.maxTokens;
-	l.reservedTokens += b.maxTokens;
-	l.freeIterations -= b.maxIterations;
-	l.reservedIterations += b.maxIterations;
+	if (l.tokensCapped) {
+		l.freeTokens -= b.maxTokens ?? 0;
+		l.reservedTokens += b.maxTokens ?? 0;
+	}
+	if (l.iterationsCapped) {
+		l.freeIterations -= b.maxIterations ?? 0;
+		l.reservedIterations += b.maxIterations ?? 0;
+	}
 	l.freeUsd -= b.maxUsd ?? 0;
 	l.reservedUsd += b.maxUsd ?? 0;
 }
@@ -1902,18 +1909,20 @@ function ledgerTake(l, b) {
 * dollar ceiling: without `maxUsd` it reserved NO dollars, so under a capped root its dollars are
 * OBSERVED spend, committed and debited from `free` like `observe`d inference.
 */
-function ledgerClassifyOverspend(l, held, usdBudgeted, spent) {
+function ledgerClassifyOverspend(l, held, usdBudgeted, spent, limits) {
 	const unknownUnderCap = l.usdCapped && spent.usdKnown === false;
 	const spentTokens = chargedTokens(spent.tokens);
 	const overspent = [];
-	if (spentTokens > held.tokens) overspent.push({
+	const tokens = limits === void 0 ? held.tokens : limits.maxTokens;
+	const iterations = limits === void 0 ? held.iterations : limits.maxIterations;
+	if (tokens !== void 0 && spentTokens > tokens) overspent.push({
 		channel: "tokens",
-		reserved: held.tokens,
+		reserved: tokens,
 		spent: spentTokens
 	});
-	if (spent.iterations > held.iterations) overspent.push({
+	if (iterations !== void 0 && spent.iterations > iterations) overspent.push({
 		channel: "iterations",
-		reserved: held.iterations,
+		reserved: iterations,
 		spent: spent.iterations
 	});
 	if (!unknownUnderCap && l.usdCapped && usdBudgeted && spent.usd > held.usd) overspent.push({
@@ -1933,12 +1942,16 @@ function ledgerClassifyOverspend(l, held, usdBudgeted, spent) {
 function ledgerSettle(l, held, spent, unknownUnderCap) {
 	noteUnknowns(l, spent);
 	const spentTokens = chargedTokens(spent.tokens);
-	l.reservedTokens -= held.tokens;
 	l.committedTokens += spentTokens;
-	l.freeTokens += held.tokens - spentTokens;
-	l.reservedIterations -= held.iterations;
+	if (l.tokensCapped) {
+		l.reservedTokens -= held.tokens;
+		l.freeTokens += held.tokens - spentTokens;
+	}
 	l.committedIterations += spent.iterations;
-	l.freeIterations += held.iterations - spent.iterations;
+	if (l.iterationsCapped) {
+		l.reservedIterations -= held.iterations;
+		l.freeIterations += held.iterations - spent.iterations;
+	}
 	if (l.usdCapped) {
 		l.reservedUsd -= held.usd;
 		l.committedUsd += spent.usd;
@@ -1965,9 +1978,9 @@ function ledgerObserve(l, spend, unknownUnderCap, requireAllResources) {
 function debit(l, spend) {
 	noteUnknowns(l, spend);
 	const tokens = chargedTokens(spend.tokens);
-	l.freeTokens -= tokens;
+	if (l.tokensCapped) l.freeTokens -= tokens;
 	l.committedTokens += tokens;
-	l.freeIterations -= spend.iterations;
+	if (l.iterationsCapped) l.freeIterations -= spend.iterations;
 	l.committedIterations += spend.iterations;
 	l.committedUsd += spend.usd;
 	if (l.usdCapped) l.freeUsd -= spend.usd;
@@ -2002,14 +2015,16 @@ function ledgerRestore(l, root, restore) {
 		}, root));
 		l.tokensTainted = true;
 		l.usdMeasured = false;
-		l.freeTokens -= uncertain.maxTokens;
-		l.committedTokens += uncertain.maxTokens;
-		l.freeIterations -= uncertain.maxIterations;
-		l.committedIterations += uncertain.maxIterations;
+		const tokens = uncertain.maxTokens ?? (l.tokensCapped ? Math.max(0, l.freeTokens) : 0);
+		const iterations = uncertain.maxIterations ?? (l.iterationsCapped ? Math.max(0, l.freeIterations) : 0);
+		l.committedTokens += tokens;
+		l.committedIterations += iterations;
+		if (l.tokensCapped) l.freeTokens -= tokens;
+		if (l.iterationsCapped) l.freeIterations -= iterations;
 		if (!l.usdCapped) continue;
 		if (uncertain.maxUsd === void 0) {
 			l.usdTainted = true;
-			l.committedUsd += l.freeUsd > 0 ? l.freeUsd : 0;
+			l.committedUsd += Math.max(0, l.freeUsd);
 			l.freeUsd = 0;
 		} else {
 			l.freeUsd -= uncertain.maxUsd;
@@ -2141,7 +2156,7 @@ async function foldUsage(events) {
 * overspend of a $0 ceiling. Unknowable dollar cost under a dollar limit closes the known
 * token/iteration work, marks the dollar channel unusable and refuses later reservations. An
 * unknowable TOKEN count records the work, debits what is known, and marks
-* `readout().tokensKnown` false (a ceiling, not a measurement); tokens are always capped, so one
+* `readout().tokensKnown` false (a ceiling, not a measurement); one
 * unreported turn must not end the run.
 *
 * A reservation the free balance cannot cover now can WAIT (`reserve(b, holder, { wait: true })`)
@@ -2217,7 +2232,7 @@ function createBudgetPool(root, runStartedAtMs, restore = {}) {
 	function admitToWait(b, holder, keep) {
 		const id = nextTicketId++;
 		open.set(id, holder);
-		const ticket = ticketFor(id, b);
+		const ticket = ticketFor(id, b, ledger);
 		let grant;
 		let refuse;
 		const granted = new Promise((resolve, reject) => {
@@ -2256,7 +2271,7 @@ function createBudgetPool(root, runStartedAtMs, restore = {}) {
 			open.set(id, holder);
 			return {
 				ok: true,
-				ticket: ticketFor(id, b)
+				ticket: ticketFor(id, b, ledger)
 			};
 		}
 		if (options.wait !== true || !fitsAfterRefunds(shortfalls)) return {
@@ -2290,7 +2305,10 @@ function createBudgetPool(root, runStartedAtMs, restore = {}) {
 			resources: void 0
 		} : ticket.reserved;
 		const usdBudgeted = ticket.reserved.usdBudgeted !== false;
-		const { overspent, unknownUnderCap } = ledgerClassifyOverspend(ledger, held, usdBudgeted, spent);
+		const { overspent, unknownUnderCap } = ledgerClassifyOverspend(ledger, held, usdBudgeted, spent, heldNothing ? {
+			maxTokens: 0,
+			maxIterations: 0
+		} : ticket.limits);
 		let fault = unknownUnderCap ? `ticket ${ticket.id} reported unknown dollar cost under a dollar-capped budget` : void 0;
 		open.delete(ticket.id);
 		const resourceSettlement = ledgerSettle(ledger, held, spent, unknownUnderCap);
@@ -2314,12 +2332,15 @@ function createBudgetPool(root, runStartedAtMs, restore = {}) {
 		return {
 			...ledger.resources.size ? { resources: Object.fromEntries([...ledger.resources].map(([name, value]) => [name, { ...value }])) } : {},
 			tokensLeft: ledger.freeTokens,
+			tokensCapped: ledger.tokensCapped,
+			committedTokens: ledger.committedTokens,
 			tokensKnown: !ledger.tokensTainted,
 			cacheBreakdownKnown: !ledger.cacheBreakdownTainted,
 			usdLeft: ledger.usdCapped ? ledger.usdTainted ? 0 : ledger.freeUsd : 0,
 			usdCapped: ledger.usdCapped,
 			usdKnown: ledger.usdMeasured && !ledger.usdTainted,
 			iterationsLeft: ledger.freeIterations,
+			iterationsCapped: ledger.iterationsCapped,
 			deadlineMs: ledger.absoluteDeadlineMs,
 			reservedTokens: ledger.reservedTokens
 		};
@@ -2358,14 +2379,18 @@ function assertResourceDeclarations(ledger, b) {
 function fitsAfterRefunds(shortfalls) {
 	return shortfalls.every((shortfall) => shortfall.closedByUnknownSpend !== true && shortfall.requested <= shortfall.free + (shortfall.held ?? 0));
 }
-function ticketFor(id, b) {
+function ticketFor(id, b, ledger) {
 	return {
 		id,
+		limits: {
+			...b.maxTokens === void 0 ? {} : { maxTokens: b.maxTokens },
+			...b.maxIterations === void 0 ? {} : { maxIterations: b.maxIterations }
+		},
 		reserved: {
 			...b.resources === void 0 ? {} : { resources: Object.fromEntries(Object.entries(b.resources).map(([name, value]) => [name, { ...value }])) },
-			tokens: b.maxTokens,
+			tokens: ledger.tokensCapped ? b.maxTokens ?? 0 : 0,
 			usd: b.maxUsd ?? 0,
-			iterations: b.maxIterations,
+			iterations: ledger.iterationsCapped ? b.maxIterations ?? 0 : 0,
 			usdBudgeted: b.maxUsd !== void 0
 		}
 	};
@@ -2440,7 +2465,8 @@ function jsonContentText(value) {
 // src/runtime/supervise/executor-outcome.ts
 const outcomeSchema = AgentTurnResultSchema.pick({
 	success: true,
-	error: true
+	error: true,
+	failure: true
 }).extend({
 	errorCode: AgentTurnResultSchema.shape.error,
 	statusCode: z.number().int().min(400).max(599).optional()
@@ -2452,6 +2478,7 @@ function executorFailure(result) {
 	if (outcome.success) return void 0;
 	return {
 		error: outcome.error ?? "Agent execution failed",
+		...outcome.failure === void 0 ? {} : { failure: outcome.failure },
 		...outcome.errorCode === void 0 ? {} : { errorCode: outcome.errorCode },
 		...outcome.statusCode === void 0 ? {} : { statusCode: outcome.statusCode }
 	};
@@ -2460,14 +2487,45 @@ function executorFailure(result) {
 function executorFailureReason(result) {
 	return executorFailure(result)?.error;
 }
-/**
-* The platform's own failure vocabulary: machine codes and lifecycle messages that the sandbox
-* runtime, the router, or the egress path put in an executor envelope when the platform, not
-* the agent's work, ended the execution. Each entry names its evidence: the count is how many
-* down children carried it on the 2026-09-20 fleet corpus (277 down settlements across 691
-* runs), every one of them stamped `infra: false` by the hard-coded call site this table
-* replaced. The table is deliberately the platform's fixed strings, not the agent's prose.
-*/
+/** Canonical producer classifications take precedence over the legacy code/message vocabulary. */
+const TURN_FAILURE_POLICY = {
+	capacity: {
+		classification: "unavailable",
+		failureKind: "infra",
+		infra: true,
+		code: "upstream-unavailable",
+		owner: "platform"
+	},
+	caller: {
+		classification: "terminal",
+		failureKind: "deterministic",
+		infra: void 0,
+		code: "request-rejected",
+		owner: "caller"
+	},
+	infra: {
+		classification: "transient",
+		failureKind: "infra",
+		infra: true,
+		code: "transport",
+		owner: "platform"
+	},
+	work: {
+		classification: "transient",
+		failureKind: "deterministic",
+		infra: void 0,
+		code: "work-failed",
+		owner: "work"
+	}
+};
+const turnFailurePolicy = (failure) => TURN_FAILURE_POLICY[failure.kind];
+/** Validate the shared contract on an envelope or any wrapped cause; malformed legacy data falls back. */
+function turnFailureOf(value) {
+	for (const link of causeChain(value)) try {
+		const parsed = AgentTurnFailureSchema.safeParse(Reflect.get(link, "failure"));
+		if (parsed.success) return parsed.data;
+	} catch {}
+}
 const PLATFORM_FAILURE_CODES = new Set([
 	"QUOTA_EXCEEDED",
 	"provider_quota_exceeded",
@@ -2501,18 +2559,9 @@ const PLATFORM_FAILURE_MESSAGES = [
 	/OpenCode exited while a model step was still in progress/u,
 	/the agent runtime restarted/u
 ];
-/**
-* Whether an executor envelope's failure was the platform's, as far as the envelope can say.
-*
-* `true` when the code or the message is in the platform's own vocabulary above. `undefined`
-* otherwise: the harness reported a failure and nothing in the envelope attributes it, so the
-* settlement carries no `infra` claim at all rather than a false one. This path never answers
-* `false`, because an executor envelope cannot prove the agent's work was at fault; the throw
-* path in `scope.ts` still answers `false` for an ordinary thrown result, where the runtime does
-* know. Until this function existed both envelope sites stamped `infra: false` unconditionally,
-* and the flag caught 1 of the 78 platform losses it was checked against on the fleet corpus.
-*/
+/** Producer-owned classification first; legacy platform codes/messages otherwise leave attribution unknown. */
 function executorFailureInfra(failure) {
+	if (failure.failure) return turnFailurePolicy(failure.failure).infra;
 	const code = failure.errorCode?.toLowerCase();
 	if (code !== void 0 && PLATFORM_FAILURE_CODES.has(code)) return true;
 	return PLATFORM_FAILURE_MESSAGES.some((pattern) => pattern.test(failure.error)) ? true : void 0;
@@ -2717,24 +2766,8 @@ function storedText(event) {
 	return JSON.stringify(event) ?? "null";
 }
 // src/runtime/supervise/upstream-unavailable.ts
-/**
-* An upstream that cannot serve NOW: how Runtime recognizes one, and how long an agent waits for it.
-*
-* A model provider's exhausted quota, a rate limit, an overload, or the router's own refused
-* credential is not a fault in the agent: the same request succeeds when capacity returns. A
-* driver that meets one re-enters after a pause (`runDriverWithRetry`), and a leaf continues in
-* its environment after the same pause (`providerAsExecutor`). Both read the refusal and the pause
-* from here, so an outage costs a director and its workers the same number of turns.
-*
-* This module imports nothing, so the provider executor can read it without the error classes of
-* `../../errors`.
-*/
-/**
-* Machine codes that say the upstream cannot serve now rather than that the request is wrong.
-* Each is a code an upstream publishes, not prose: the router's
-* (`lib/model-substitution.ts`, `lib/upstream-error-triage.ts`) and the OpenAI- and Anthropic-shaped
-* error types a relayed body carries.
-*/
+/** Shared capacity recognition and pause policy for drivers and retained leaves. */
+/** Legacy capacity codes for producers without the canonical failure contract. */
 const UNAVAILABLE_CODES = /* @__PURE__ */ new Set([
 	"provider_quota_exhausted",
 	"provider_quota_exceeded",
@@ -2754,12 +2787,7 @@ const UNAVAILABLE_STATUSES = /* @__PURE__ */ new Set([
 	503,
 	529
 ]);
-/**
-* A harness that flattens the router's JSON body into its own failure text leaves the router's
-* code in that text: `opencode execution failed: No provider served model "..."
-* (provider_quota_exhausted)`. The code is matched as a whole token, and a status only in the
-* `status code <n>` framing a harness prints, so prose that merely mentions a quota does not match.
-*/
+/** Legacy text fallback reads whole code tokens and explicitly framed HTTP statuses. */
 function unavailableSignalInText(text) {
 	for (const token of text.toLowerCase().matchAll(/[a-z_]+/gu)) if (UNAVAILABLE_CODES.has(token[0])) return token[0];
 	const status = printedStatus(text);
@@ -2770,13 +2798,7 @@ const printedStatus = (text) => {
 	const status = text.match(/\bstatus code (\d{3})\b/u)?.[1];
 	return status === void 0 ? void 0 : Number(status);
 };
-/**
-* Sandbox's 409 `NO_HOST_FITS_SHAPE` for a shape that fits its host's ceiling: no exceeded
-* dimension, only `its room is held placeable on <sku>`. It is sent by mistake for "no room now"
-* while new hosts cannot be planned, and the create lands within one autoscaler purchase. Four
-* nodes of Discovery run magnetar-rust-sandbox-20261101a went down on it. A shape over the ceiling
-* names the dimension it exceeds instead, and stays refused.
-*/
+/** Held room for an otherwise placeable shape is temporary capacity; oversized shapes stay refused. */
 const HELD_ROOM_REFUSAL = /\bits room is held placeable\b/u;
 /**
 * The code or status that marks a failed turn outcome as an upstream capacity refusal, or
@@ -2785,6 +2807,8 @@ const HELD_ROOM_REFUSAL = /\bits room is held placeable\b/u;
 * report the router's refusal as text.
 */
 function unavailableSignalOfFailure(failure) {
+	const typed = turnFailureOf(failure);
+	if (typed) return turnFailurePolicy(typed).classification === "unavailable" ? typed.code : void 0;
 	const code = failure.errorCode?.toLowerCase();
 	if (code !== void 0 && UNAVAILABLE_CODES.has(code)) return code;
 	if (code === "no_host_fits_shape" && HELD_ROOM_REFUSAL.test(failure.error)) return "host-room-held";
@@ -2810,13 +2834,10 @@ function cappedDoublingMs(consecutive, first, ceiling) {
 const MAX_RESET_HOLD_MS = 216e5;
 /** How often a refusal whose reset is beyond {@link MAX_RESET_HOLD_MS} is probed again. */
 const FAR_RESET_PROBE_MS = 36e5;
-/**
-* When a capacity refusal says its quota resets, as epoch ms: the `resetAt` field (ISO string or
-* epoch ms) on the error or a cause, as agent-provider-tangle's `TangleCredentialCapacityError`
-* carries it. Text is never read: zro-game-20261104b's children re-probed every 183 s against a
-* seat whose structured reset was 2026-11-10T12:00Z, because only the message was parsed.
-*/
-function reportedResetAt(error) {
+/** Read canonical reset/retry-after before legacy structured reset fields; never parse text. */
+function reportedResetAt(error, nowMs = Date.now()) {
+	const typed = turnFailureOf(error);
+	if (typed) return typed.resetAt !== void 0 ? Date.parse(typed.resetAt) : typed.retryAfterMs !== void 0 ? nowMs + typed.retryAfterMs : void 0;
 	for (const cause of causeChain(error)) {
 		let value;
 		try {
@@ -3226,6 +3247,8 @@ function runtimeProviderCode(value) {
 	return typeof value === "string" && MACHINE_CODE_PATTERN.test(value) ? value : void 0;
 }
 function upstreamMachineCode(links) {
+	const typed = links.map(turnFailureOf).find((value) => value !== void 0);
+	if (typed) return runtimeProviderCode(typed.code);
 	return [
 		"upstreamCode",
 		"errorCode",
@@ -3234,6 +3257,8 @@ function upstreamMachineCode(links) {
 }
 /** The typed HTTP status and retry-after of the link carrying the provider's code. */
 function upstreamResponse(links, providerCode) {
+	const typed = links.map(turnFailureOf).find((value) => value !== void 0);
+	if (typed?.retryAfterMs !== void 0) return { retryAfterMs: typed.retryAfterMs };
 	const link = links.find((each) => [
 		"upstreamCode",
 		"errorCode",
@@ -3272,6 +3297,12 @@ function runtimeFailureCause(error, context = {}) {
 			code: caller,
 			owner: "caller"
 		});
+		for (const link of links) {
+			if (link instanceof RetainedExecutionPendingError && link.pendingCause === "provider-contract") return failure(retainedFailures["provider-contract"]);
+			if (read(link, "name") === "RetainedRunProviderContractError") return failure(retainedFailures[classifyRetainedPendingCause(link)]);
+		}
+		const typed = error instanceof AgentEvalError$1 && !(error instanceof BackendTransportError) ? void 0 : turnFailureOf(error);
+		if (typed) return failure(turnFailurePolicy(typed));
 		if (context.signal === void 0 && links.some((link) => read(link, "name") === "AbortError")) return failure({
 			code: "aborted",
 			owner: "caller"
@@ -3309,7 +3340,8 @@ function runtimeFailureCause(error, context = {}) {
 function reportedFailureCause(outcome) {
 	return runtimeFailureCause(Object.assign(new Error(outcome.error ?? "execution reported a failure"), {
 		errorCode: outcome.errorCode,
-		statusCode: outcome.statusCode
+		statusCode: outcome.statusCode,
+		failure: outcome.failure
 	}));
 }
 /**
@@ -3506,14 +3538,21 @@ function runtimeOwnedDeferredExecutorRuntime(executor) {
 	return attestation?.kind === "deferred" ? attestation.runtime : void 0;
 }
 /** Propagate trust from a built-in driver adapter to the Agent and recursive executor it owns. */
-function attestRuntimeOwnedScopeOwner(owner, runtime) {
-	runtimeOwnedScopeOwners.set(owner, runtime);
+function attestRuntimeOwnedScopeOwner(owner, runtime, control) {
+	runtimeOwnedScopeOwners.set(owner, {
+		runtime,
+		...control === void 0 ? {} : { control }
+	});
 	return owner;
 }
+/** A trusted owner's existing provider control remains available before any execution turn. */
+function runtimeOwnedScopeOwnerControl(owner) {
+	return runtimeOwnedScopeOwners.get(owner)?.control;
+}
 /** Return a built-in scope owner's expected concrete leaf runtime; caller-owned functions/Agents
 * deliberately have no entry even if they add lookalike fields. */
 function runtimeOwnedScopeOwnerRuntime(owner) {
-	return runtimeOwnedScopeOwners.get(owner);
+	return runtimeOwnedScopeOwners.get(owner)?.runtime;
 }
 /** Mark one provider inference attempt on a Runtime-owned executor. */
 function recordRuntimeOwnedProviderAttemptStart(executor) {
@@ -12788,7 +12827,7 @@ function createChildRetention({ args, controller, id, ordinal, identity, recover
 }
 /** Whether a settled spend exceeds the budget it was given, by the channels the pool reconciles. */
 function overBudget(budget, spent) {
-	return chargedTokens(spent.tokens) > budget.maxTokens || spent.iterations > budget.maxIterations || budget.maxUsd !== void 0 && spent.usdKnown !== false && spent.usd > budget.maxUsd;
+	return budget.maxTokens !== void 0 && chargedTokens(spent.tokens) > budget.maxTokens || budget.maxIterations !== void 0 && spent.iterations > budget.maxIterations || budget.maxUsd !== void 0 && spent.usdKnown !== false && spent.usd > budget.maxUsd;
 }
 // src/durable/spawn-journal/record-events.ts
 /** Decode the file journal's historical single-event and atomic-group envelopes. @internal */
@@ -14739,12 +14778,18 @@ function reservedCursorFloor(events) {
 function sumSpendFromEvents(events) {
 	const totals = sumMeasuredSpendFromEvents(events);
 	const rootBudget = events.find((event) => event.kind === "spawned" && event.parent === void 0)?.budget;
+	let remainingRootTokens = Math.max(0, (rootBudget?.maxTokens ?? 0) - chargedTokens(totals.childWork.tokens) - chargedTokens(totals.driverInference.tokens));
+	let remainingRootIterations = Math.max(0, (rootBudget?.maxIterations ?? 0) - totals.childWork.iterations - totals.driverInference.iterations);
 	let remainingRootUsd = Math.max(0, (rootBudget?.maxUsd ?? 0) - totals.childWork.usd - totals.driverInference.usd);
 	for (const budget of uncertainSpawnBudgets(events)) {
 		const unknown = withBudgetResources(zeroSpend(), budget);
 		Object.assign(totals.childWork, addResourceSpend(totals.childWork.resources, unknown.resources));
-		totals.childWork.iterations += budget.maxIterations;
-		totals.childWork.tokens.input += budget.maxTokens;
+		const iterationCharge = budget.maxIterations ?? remainingRootIterations;
+		totals.childWork.iterations += iterationCharge;
+		remainingRootIterations = Math.max(0, remainingRootIterations - iterationCharge);
+		const tokenCharge = budget.maxTokens ?? remainingRootTokens;
+		totals.childWork.tokens.input += tokenCharge;
+		remainingRootTokens = Math.max(0, remainingRootTokens - tokenCharge);
 		totals.childWork.tokensKnown = false;
 		const usdCharge = budget.maxUsd ?? (rootBudget?.maxUsd !== void 0 ? remainingRootUsd : 0);
 		totals.childWork.usd += usdCharge;
@@ -16773,8 +16818,8 @@ function reservationOwnerFloor(args) {
 	if (reservationPolicy && !args.ownerBudget) throw new ValidationError("reservationPolicy requires the owning scope budget");
 	const ownerBudget = args.ownerBudget;
 	return reservationPolicy && ownerBudget ? {
-		tokens: Math.ceil(ownerBudget.maxTokens * reservationPolicy.ownerShare),
-		iterations: Math.ceil(ownerBudget.maxIterations * reservationPolicy.ownerShare),
+		tokens: Math.ceil((ownerBudget.maxTokens ?? 0) * reservationPolicy.ownerShare),
+		iterations: Math.ceil((ownerBudget.maxIterations ?? 0) * reservationPolicy.ownerShare),
 		...ownerBudget.maxUsd === void 0 ? {} : { usd: ownerBudget.maxUsd * reservationPolicy.ownerShare }
 	} : void 0;
 }
@@ -16853,6 +16898,6 @@ async function recoverRetainedChildren(args, children, spawn, next) {
 		throw error;
 	}
 }
-export { deriveNodeExecutionIdentity as $, parseCodexUsageRecord as $i, persistHarnessTranscript as $n, DISPATCH_EXECUTION_CHANGED_CODE as $r, insideCursorNamespace as $t, nestedScopeSeamKey as A, spendFromUsageTotals as Ai, workerTraceEnv as An, recordRuntimeOwnedProviderAttemptStart as Ar, beginScopeRetainedOwnerDrive as At, beginScopeOwnerAttempt as B, extractTransportEventIdentity as Bi, flatOtelSpan as Bn, unknownExecutionBindingReceipt as Br, retainedOwnerWorkspaceRetentionSeamKey as Bt, writeWorkerSteerAcknowledgement as C, hashJson as Ci, nativeCopyDelayMs as Cn, finalizeRuntimeOwnedPendingExecutor as Cr, environmentReader as Ct, isTraceAnalysisStore as D, meterUsageEvent as Di, openSlotGroup as Dn, newExecutionAttemptId as Dr, prepareScopeRetainedOwnerTask as Dt, replaySpawnTree as E, createBudgetPool as Ei, createWorkerSlots as En, knownMaterializationReceipt as Er, consumeScopeRetainedOwnerResult as Et, recoverRetainedInteractiveRun as F, sandboxLeafOutputFromEvents as Fi, buildLoopOtelSpans as Fn, runtimeOwnedExecutorExecutionBinding as Fr, scopeRetainedOwnerRestorePoint as Ft, scopeOwnerExecutorNodeContext as G, extractLlmCallEvent as Gi, sanitizeKnowledgeReadinessReport as Gn, runtimeFlowAgent as Gr, materializeTreeView as Gt, noteScopeOwnerPlannedExecution as H, canonicalSandboxUsageMode as Hi, loopEventToOtelSpan as Hn, executableAgentProfileSnapshot as Hr, scopeRetainedOwnerJournalRoot as Ht, startRetainedInteractiveRun as I, sandboxOutputMarker as Ii, buildLoopSpanNodes as In, runtimeOwnedExecutorMaterialization as Ir, noteScopeRetainedOwnerCoordination as It, providerVisibleProfile as J, sameModelId as Ji, captureBoundHarnessTranscript as Jn, runtimeFailureCause as Jr, nestedDriverTreeRoot as Jt, coordinationMcpAlias as K, isSandboxTerminalEvent as Ki, sanitizeRuntimeStreamEvent as Kn, runtimeFlowBrain as Kr, attestNestedDriverTreeOwner as Kt, FileSpawnJournal as L, sandboxProgressEvents as Li, buildRuntimeEventOtelSpans as Ln, runtimeOwnedExecutorProviderEvidence as Lr, scopeRetainedOwnerCheckpointing as Lt, attachWorker as M, createSandboxToolPartState as Mi, createPropagatingTraceEmitter as Mn, recordRuntimeOwnedProviderIdentityConflict as Mr, scopeRetainedOwnerTurnEnded as Mt, readWorkerInteractiveBinding as N, mapSandboxEvent as Ni, mergeTraceEnv as Nn, recordRuntimeOwnedProviderModel as Nr, assertRetainedOwnerCoordinationRekey as Nt, parseWorkerToolTraceArtifact as O, newUsageTotals as Oi, resolveWorkerSlots as On, providerAttemptEvidence as Or, scopeRetainedOwnerPriorSpend as Ot, reconnectRetainedInteractiveRun as P, mapSandboxToolEvent as Pi, readTraceContextFromEnv as Pn, runtimeOwnedDriveHarnessProviderEvidence as Pr, reconcileScopeRetainedOwnerEnvironment as Pt, assertRecursiveReservationPolicy as Q, decodeHarnessUsage as Qi, harnessTranscriptUnavailable as Qn, settlementFailureCause as Qr, closesCursorSlot as Qt, appendSpawnEvents as R, terminalTextFromSandboxEvent as Ri, createOpenInferenceFileExporter as Rn, runtimeOwnedPendingExecutorMaterialization as Rr, bindScopeRetainedOwnerEnvironmentId as Rt, writeWorkerSteer as S, executorFailureInfra as Si, captureProviderWorkspaceSnapshot as Sn, authoredProfileDigest as Sr, scopeRetainedOwnerResourceReader as St, sumSpendFromEvents as T, isCredentialRefusal as Ti, workspaceCaptureReceipt as Tn, knownExecutionBindingReceipt as Tr, abandonScopeRetainedOwnerInvocation as Tt, recordScopeOwnerMaterialization as U, createSandboxTurnEventCollector as Ui, createRuntimeEventCollector as Un, executableAgentSpecSnapshot as Ur, loadSpawnForest as Ut, finalizeScopeOwnerMaterialization as V, assertSandboxServedModel as Vi, generateSpanId as Vn, unknownMaterializationReceipt as Vr, scopeRetainedOwnerContext as Vt, restoreScopeOwnerAcceptedExecution as W, createSandboxUsageLedger as Wi, createRuntimeStreamEventCollector as Wn, isRuntimeFlowBrain as Wr, ownedTreeRootSpawn as Wt, reenteredWorkers as X, sandboxTerminalUsageField as Xi, harnessTranscriptArtifact as Xn, runtimeFailureRemediationSchema as Xr, encodeResultBlob as Xt, runtimeGraphMetadataKey as Y, sandboxEventServedBackend as Yi, captureHarnessTranscript as Yn, runtimeFailureCauseSchema as Yr, FileResultBlobStore as Yt, settledToIteration as Z, sumSandboxUsage as Zi, harnessTranscriptFromLines as Zn, runtimeProviderCode as Zr, SpawnEventIndex as Zt, supervisorRunDir as _, TRACE_ROOT_SCHEMA as _i, destroyInteractiveEnvironment as _n, attestRuntimeOwnedDeferredExecutor as _r, startScopeRecoveries as _t, readRootStream as a, freezeControlRef as aa, registerRetainedExecutorPreparation as ai, reconnectRetainedRun as an, DEFAULT_STALL_AFTER_MS as ar, hasRetriableTeardowns as at, workerInboxFileFromEventDir as b, contentRef as bi, assertProviderWorkspaceRetentionPort as bn, attestRuntimeOwnedScopeOwner as br, prepareScopeRetainedOwnerSeatSwitch as bt, cancelWorker as c, RunCancellationReason as ca, UNAVAILABLE_CODES as ci, startRetainedRunInEnvironment as cn, readWorkerProgress as cr, recordScopeOwnerBarrenPause as ct, legacySupervisorRunsRoot as d, runAbortable as da, jitteredMs as di, offerInteractiveControl as dn, SEAT_RECHECK_MS as dr, registerNestedTeardownScope as dt, recordValue as ea, DISPATCH_NOT_ADMITTED_CODE as ei, verifyWorkspaceMarker as en, readHarnessTranscript as er, freeSlots as et, readWorkerCancelRequests as f, signalAbortError as fa, printedStatus as fi, prepareInteractiveDelegation as fn, SeatChain as fr, releaseHeldEnvironments as ft, safeWorkerFile as g, unavailableSignalOfFailure as gi, verifyObserverRecords as gn, subscriptionUsageLimitSignal as gr, settleManagerWork as gt, readWorkerSteerRequests as h, providerMessageText as ha, unavailableResumeAt as hi, observerRecordDigest as hn, seatExecutionProfile as hr, retryUnconfirmedTeardowns as ht, nodeStreamFile as i, exactSession as ia, isSchemaRejection as ii, mintRetainedIdentity as in, retainHarnessTranscript as ir, closeScopeAdmission as it, interactiveAdmissionSeamKey as j, assertValidBudget as ji, workerTraceHeaders as jn, recordRuntimeOwnedProviderDispatchNotStarted as jr, scopeRetainedOwnerSettled as jt, workerTraceAnalysisStore as k, spendFromUsageEvents as ki, WORKER_TRACE_PROPAGATION as kn, recordRuntimeOwnedDriveHarnessProviderEvidence as kr, scopeRetainedOwnerResult as kt, claimWorkerSteerDelivery as l, abortReason as la, UNAVAILABLE_STATUSES as li, retainedCreateMaterial as ln, isLiveNodeStatus as lr, recordScopeOwnerDriverAttempt as lt, readWorkerSteerAcknowledgement as m, promptOptionsFromAgentTurnInput as ma, unavailablePauseMs as mi, createFileObserverHooks as mn, authoredSeatStages as mr, releaseRetainedEnvironments as mt, ROOT_STREAM_FILE as n, assertEventBinding as na, TRANSPORT_ERROR_CODES as ni, stopRetainedNativeExecution as nn, readBoundHarnessSessions as nr, rollingDispatch as nt, readRootStreamReceipt as o, isTerminalSessionStatus as oa, retainedExecutorContext as oi, recoverRetainedRun as on, createActivityLog as or, meterRuntimeOwnedAccounting as ot, readWorkerCancellation as p, promptFromAgentTurnInput as pa, reportedResetAt as pi, FileObserverJournal as pn, SeatPauseError as pr, releaseManagerEnvironment as pt, coordinationProfileToolPrefix as q, notifySandboxEventObserver as qi, HARNESS_TRANSCRIPT_SETTLE_TIMEOUT_MS as qn, reportedFailureCause as qr, driverRuntime as qt, createRootStreamSink as r, awaitAbortable$1 as ra, isProvisioningRefusal as ri, assertRetainedRunReplayMaterial as rn, resolveHarnessTranscriptCapture as rr, closeRetainedSlots as rt, appendWorkerControlEvent as s, sameControlCoordinates as sa, retainedExecutorSeamKey as si, startRetainedRun as sn, describeToolArgs as sr, meterRuntimeOwnedProviderAttempt as st, createScope as t, RetainedRunProviderContractError as ta, RetainedExecutionPendingError as ti, describeRetainedNativeStops as tn, HARNESS_TRANSCRIPT_READ_LIMITS as tr, queueOf as tt, legacySupervisorRunDir as u, linkAbort as ua, cappedDoublingMs as ui, acceptedInteractiveControl as un, isTerminalNodeStatus as ur, recordScopeOwnerPause as ut, supervisorRunsRoot as v, TRACE_SUMMARY_SCHEMA as vi, environmentGone as vn, attestRuntimeOwnedExecutor as vr, unconfirmedTeardowns as vt, prepareScopeResume as w, credentialCommandExit as wi, openNativeMirror as wn, inheritRuntimeOwnedExecutorAttestation as wr, resolveSpawnResourcePaths as wt, writeWorkerCancellation as x, executorFailure as xi, captureProviderLiveWorkspace as xn, authoredAgentIdentity as xr, releaseScopeRetainedOwnerForSeatPause as xt, workerCancellationsDir as y, contentAddress as yi, DEFAULT_NATIVE_CAPTURE_INTERVAL_MS as yn, attestRuntimeOwnedPendingExecutor as yr, waitForScopeChildren as yt, spawnJournalRecordEvents as z, canonicalStreamEventFromSandboxEvent as zi, createOtelExporter as zn, runtimeOwnedScopeOwnerRuntime as zr, bindScopeRetainedOwnerProvider as zt };
+export { deriveNodeExecutionIdentity as $, sandboxEventServedBackend as $i, harnessTranscriptUnavailable as $n, runtimeProviderCode as $r, closesCursorSlot as $t, nestedScopeSeamKey as A, createBudgetPool as Ai, WORKER_TRACE_PROPAGATION as An, recordRuntimeOwnedDriveHarnessProviderEvidence as Ar, beginScopeRetainedOwnerDrive as At, beginScopeOwnerAttempt as B, sandboxOutputMarker as Bi, createOtelExporter as Bn, runtimeOwnedScopeOwnerControl as Br, bindScopeRetainedOwnerWorkspaceRetention as Bt, writeWorkerSteerAcknowledgement as C, executorFailure as Ci, captureProviderWorkspaceSnapshot as Cn, authoredProfileDigest as Cr, environmentReader as Ct, isTraceAnalysisStore as D, hashJson as Di, createWorkerSlots as Dn, knownMaterializationReceipt as Dr, prepareScopeRetainedOwnerTask as Dt, replaySpawnTree as E, turnFailurePolicy as Ei, workspaceCaptureReceipt as En, knownExecutionBindingReceipt as Er, consumeScopeRetainedOwnerResult as Et, recoverRetainedInteractiveRun as F, assertValidBudget as Fi, readTraceContextFromEnv as Fn, runtimeOwnedDriveHarnessProviderEvidence as Fr, scopeRetainedOwnerRestorePoint as Ft, scopeOwnerExecutorNodeContext as G, assertSandboxServedModel as Gi, createRuntimeStreamEventCollector as Gn, executableAgentSpecSnapshot as Gr, ownedTreeRootSpawn as Gt, noteScopeOwnerPlannedExecution as H, terminalTextFromSandboxEvent as Hi, generateSpanId as Hn, unknownExecutionBindingReceipt as Hr, scopeRetainedOwnerContext as Ht, startRetainedInteractiveRun as I, createSandboxToolPartState as Ii, buildLoopOtelSpans as In, runtimeOwnedExecutorExecutionBinding as Ir, noteScopeRetainedOwnerCoordination as It, providerVisibleProfile as J, createSandboxUsageLedger as Ji, HARNESS_TRANSCRIPT_SETTLE_TIMEOUT_MS as Jn, runtimeFlowBrain as Jr, driverRuntime as Jt, coordinationMcpAlias as K, canonicalSandboxUsageMode as Ki, sanitizeKnowledgeReadinessReport as Kn, isRuntimeFlowBrain as Kr, materializeTreeView as Kt, FileSpawnJournal as L, mapSandboxEvent as Li, buildLoopSpanNodes as Ln, runtimeOwnedExecutorMaterialization as Lr, scopeRetainedOwnerCheckpointing as Lt, attachWorker as M, newUsageTotals as Mi, workerTraceHeaders as Mn, recordRuntimeOwnedProviderDispatchNotStarted as Mr, scopeRetainedOwnerTurnEnded as Mt, readWorkerInteractiveBinding as N, spendFromUsageEvents as Ni, createPropagatingTraceEmitter as Nn, recordRuntimeOwnedProviderIdentityConflict as Nr, assertRetainedOwnerCoordinationRekey as Nt, parseWorkerToolTraceArtifact as O, credentialCommandExit as Oi, openSlotGroup as On, newExecutionAttemptId as Or, scopeRetainedOwnerPriorSpend as Ot, reconnectRetainedInteractiveRun as P, spendFromUsageTotals as Pi, mergeTraceEnv as Pn, recordRuntimeOwnedProviderModel as Pr, reconcileScopeRetainedOwnerEnvironment as Pt, assertRecursiveReservationPolicy as Q, sameModelId as Qi, harnessTranscriptFromLines as Qn, runtimeFailureRemediationSchema as Qr, SpawnEventIndex as Qt, appendSpawnEvents as R, mapSandboxToolEvent as Ri, buildRuntimeEventOtelSpans as Rn, runtimeOwnedExecutorProviderEvidence as Rr, bindScopeRetainedOwnerEnvironmentId as Rt, writeWorkerSteer as S, contentRef as Si, captureProviderLiveWorkspace as Sn, authoredAgentIdentity as Sr, scopeRetainedOwnerResourceReader as St, sumSpendFromEvents as T, turnFailureOf as Ti, openNativeMirror as Tn, inheritRuntimeOwnedExecutorAttestation as Tr, abandonScopeRetainedOwnerInvocation as Tt, recordScopeOwnerMaterialization as U, canonicalStreamEventFromSandboxEvent as Ui, loopEventToOtelSpan as Un, unknownMaterializationReceipt as Ur, scopeRetainedOwnerJournalRoot as Ut, finalizeScopeOwnerMaterialization as V, sandboxProgressEvents as Vi, flatOtelSpan as Vn, runtimeOwnedScopeOwnerRuntime as Vr, retainedOwnerWorkspaceRetentionSeamKey as Vt, restoreScopeOwnerAcceptedExecution as W, extractTransportEventIdentity as Wi, createRuntimeEventCollector as Wn, executableAgentProfileSnapshot as Wr, loadSpawnForest as Wt, reenteredWorkers as X, isSandboxTerminalEvent as Xi, captureHarnessTranscript as Xn, runtimeFailureCause as Xr, FileResultBlobStore as Xt, runtimeGraphMetadataKey as Y, extractLlmCallEvent as Yi, captureBoundHarnessTranscript as Yn, reportedFailureCause as Yr, nestedDriverTreeRoot as Yt, settledToIteration as Z, notifySandboxEventObserver as Zi, harnessTranscriptArtifact as Zn, runtimeFailureCauseSchema as Zr, encodeResultBlob as Zt, supervisorRunDir as _, promptFromAgentTurnInput as _a, unavailableResumeAt as _i, verifyObserverRecords as _n, subscriptionUsageLimitSignal as _r, startScopeRecoveries as _t, readRootStream as a, RetainedRunProviderContractError as aa, isProvisioningRefusal as ai, mintRetainedIdentity as an, retainHarnessTranscript as ar, hasRetriableTeardowns as at, workerInboxFileFromEventDir as b, TRACE_SUMMARY_SCHEMA as bi, DEFAULT_NATIVE_CAPTURE_INTERVAL_MS as bn, attestRuntimeOwnedPendingExecutor as br, prepareScopeRetainedOwnerSeatSwitch as bt, cancelWorker as c, exactSession as ca, retainedExecutorContext as ci, startRetainedRun as cn, describeToolArgs as cr, recordScopeOwnerBarrenPause as ct, legacySupervisorRunsRoot as d, sameControlCoordinates as da, UNAVAILABLE_STATUSES as di, acceptedInteractiveControl as dn, isTerminalNodeStatus as dr, registerNestedTeardownScope as dt, sandboxTerminalUsageField as ea, settlementFailureCause as ei, insideCursorNamespace as en, persistHarnessTranscript as er, freeSlots as et, readWorkerCancelRequests as f, RunCancellationReason as fa, cappedDoublingMs as fi, offerInteractiveControl as fn, SEAT_RECHECK_MS as fr, releaseHeldEnvironments as ft, safeWorkerFile as g, signalAbortError as ga, unavailablePauseMs as gi, observerRecordDigest as gn, seatExecutionProfile as gr, settleManagerWork as gt, readWorkerSteerRequests as h, runAbortable as ha, reportedResetAt as hi, createFileObserverHooks as hn, authoredSeatStages as hr, retryUnconfirmedTeardowns as ht, nodeStreamFile as i, recordValue as ia, TRANSPORT_ERROR_CODES as ii, assertRetainedRunReplayMaterial as in, resolveHarnessTranscriptCapture as ir, closeScopeAdmission as it, interactiveAdmissionSeamKey as j, meterUsageEvent as ji, workerTraceEnv as jn, recordRuntimeOwnedProviderAttemptStart as jr, scopeRetainedOwnerSettled as jt, workerTraceAnalysisStore as k, isCredentialRefusal as ki, resolveWorkerSlots as kn, providerAttemptEvidence as kr, scopeRetainedOwnerResult as kt, claimWorkerSteerDelivery as l, freezeControlRef as la, retainedExecutorSeamKey as li, startRetainedRunInEnvironment as ln, readWorkerProgress as lr, recordScopeOwnerDriverAttempt as lt, readWorkerSteerAcknowledgement as m, linkAbort as ma, printedStatus as mi, FileObserverJournal as mn, SeatPauseError as mr, releaseRetainedEnvironments as mt, ROOT_STREAM_FILE as n, decodeHarnessUsage as na, DISPATCH_NOT_ADMITTED_CODE as ni, describeRetainedNativeStops as nn, HARNESS_TRANSCRIPT_READ_LIMITS as nr, rollingDispatch as nt, readRootStreamReceipt as o, assertEventBinding as oa, isSchemaRejection as oi, reconnectRetainedRun as on, DEFAULT_STALL_AFTER_MS as or, meterRuntimeOwnedAccounting as ot, readWorkerCancellation as p, abortReason as pa, jitteredMs as pi, prepareInteractiveDelegation as pn, SeatChain as pr, releaseManagerEnvironment as pt, coordinationProfileToolPrefix as q, createSandboxTurnEventCollector as qi, sanitizeRuntimeStreamEvent as qn, runtimeFlowAgent as qr, attestNestedDriverTreeOwner as qt, createRootStreamSink as r, parseCodexUsageRecord as ra, RetainedExecutionPendingError as ri, stopRetainedNativeExecution as rn, readBoundHarnessSessions as rr, closeRetainedSlots as rt, appendWorkerControlEvent as s, awaitAbortable$1 as sa, registerRetainedExecutorPreparation as si, recoverRetainedRun as sn, createActivityLog as sr, meterRuntimeOwnedProviderAttempt as st, createScope as t, sumSandboxUsage as ta, DISPATCH_EXECUTION_CHANGED_CODE as ti, verifyWorkspaceMarker as tn, readHarnessTranscript as tr, queueOf as tt, legacySupervisorRunDir as u, isTerminalSessionStatus as ua, UNAVAILABLE_CODES as ui, retainedCreateMaterial as un, isLiveNodeStatus as ur, recordScopeOwnerPause as ut, supervisorRunsRoot as v, promptOptionsFromAgentTurnInput as va, unavailableSignalOfFailure as vi, destroyInteractiveEnvironment as vn, attestRuntimeOwnedDeferredExecutor as vr, unconfirmedTeardowns as vt, prepareScopeResume as w, executorFailureInfra as wi, nativeCopyDelayMs as wn, finalizeRuntimeOwnedPendingExecutor as wr, resolveSpawnResourcePaths as wt, writeWorkerCancellation as x, contentAddress as xi, assertProviderWorkspaceRetentionPort as xn, attestRuntimeOwnedScopeOwner as xr, releaseScopeRetainedOwnerForSeatPause as xt, workerCancellationsDir as y, providerMessageText as ya, TRACE_ROOT_SCHEMA as yi, environmentGone as yn, attestRuntimeOwnedExecutor as yr, waitForScopeChildren as yt, spawnJournalRecordEvents as z, sandboxLeafOutputFromEvents as zi, createOpenInferenceFileExporter as zn, runtimeOwnedPendingExecutorMaterialization as zr, bindScopeRetainedOwnerProvider as zt };
 
-//# sourceMappingURL=scope-CJ7xtrs8.js.map
+//# sourceMappingURL=scope-JcCkUy_z.js.map