@tangle-network/agent-runtime 4.0.0 → 5.0.0

package/dist/{supervisor-CwANBb9-.js → supervisor-B-bX69uL.js}

@@ -1,8 +1,8 @@
-import { $i as parseCodexUsageRecord, $r as DISPATCH_EXECUTION_CHANGED_CODE, A as nestedScopeSeamKey, An as workerTraceEnv, Ar as recordRuntimeOwnedProviderAttemptStart, Bi as extractTransportEventIdentity, Br as unknownExecutionBindingReceipt, Bt as retainedOwnerWorkspaceRetentionSeamKey, Ci as hashJson, Cn as nativeCopyDelayMs, Cr as finalizeRuntimeOwnedPendingExecutor, Dr as newExecutionAttemptId, Ei as createBudgetPool, Er as knownMaterializationReceipt, Fi as sandboxLeafOutputFromEvents, Fr as runtimeOwnedExecutorExecutionBinding, Hi as canonicalSandboxUsageMode, Hr as executableAgentProfileSnapshot, Ii as sandboxOutputMarker, Ir as runtimeOwnedExecutorMaterialization, Ji as sameModelId, Jr as runtimeFailureCause, Jt as nestedDriverTreeRoot, Ki as isSandboxTerminalEvent, Kt as attestNestedDriverTreeOwner, Li as sandboxProgressEvents, Lt as scopeRetainedOwnerCheckpointing, Mi as createSandboxToolPartState, Mr as recordRuntimeOwnedProviderIdentityConflict, Nn as mergeTraceEnv, Nr as recordRuntimeOwnedProviderModel, On as resolveWorkerSlots, Q as assertRecursiveReservationPolicy, Qn as harnessTranscriptUnavailable, Qt as closesCursorSlot, R as appendSpawnEvents, Si as executorFailureInfra, Sn as captureProviderWorkspaceSnapshot, T as sumSpendFromEvents, Ti as isCredentialRefusal, Tn as workspaceCaptureReceipt, Tr as knownExecutionBindingReceipt, Ui as createSandboxTurnEventCollector, Ur as executableAgentSpecSnapshot, Ut as loadSpawnForest, V as finalizeScopeOwnerMaterialization, Vi as assertSandboxServedModel, Vr as unknownMaterializationReceipt, Wi as createSandboxUsageLedger, Wt as ownedTreeRootSpawn, X as reenteredWorkers, Xi as sandboxTerminalUsageField, Xr as runtimeFailureRemediationSchema, Xt as encodeResultBlob, Yi as sandboxEventServedBackend, Yn as captureHarnessTranscript, Zn as harnessTranscriptFromLines, Zr as runtimeProviderCode, Zt as SpawnEventIndex, _r as attestRuntimeOwnedDeferredExecutor, _t as startScopeRecoveries, aa as freezeControlRef, an as reconnectRetainedRun, at as hasRetriableTeardowns, bi as contentRef, bn as assertProviderWorkspaceRetentionPort, ca as RunCancellationReason, ci as UNAVAILABLE_CODES, da as runAbortable, dt as registerNestedTeardownScope, ea as recordValue, ei as DISPATCH_NOT_ADMITTED_CODE, en as verifyWorkspaceMarker, fi as printedStatus, ft as releaseHeldEnvironments, gi as unavailableSignalOfFailure, gr as subscriptionUsageLimitSignal, gt as settleManagerWork, ht as retryUnconfirmedTeardowns, ia as exactSession, ii as isSchemaRejection, in as mintRetainedIdentity, ir as retainHarnessTranscript, it as closeScopeAdmission, jn as workerTraceHeaders, jr as recordRuntimeOwnedProviderDispatchNotStarted, jt as scopeRetainedOwnerSettled, kn as WORKER_TRACE_PROPAGATION, la as abortReason, li as UNAVAILABLE_STATUSES, lr as isLiveNodeStatus, ma as promptOptionsFromAgentTurnInput, mi as unavailablePauseMs, mt as releaseRetainedEnvironments, na as assertEventBinding, ni as TRANSPORT_ERROR_CODES, nn as stopRetainedNativeExecution, oa as isTerminalSessionStatus, oi as retainedExecutorContext, on as recoverRetainedRun, or as createActivityLog, pt as releaseManagerEnvironment, qi as notifySandboxEventObserver, qn as HARNESS_TRANSCRIPT_SETTLE_TIMEOUT_MS, qr as reportedFailureCause, qt as driverRuntime, ra as awaitAbortable, ri as isProvisioningRefusal, rn as assertRetainedRunReplayMaterial, rt as closeRetainedSlots, sa as sameControlCoordinates, si as retainedExecutorSeamKey, sn as startRetainedRun, sr as describeToolArgs, t as createScope, ta as RetainedRunProviderContractError, ti as RetainedExecutionPendingError, tn as describeRetainedNativeStops, ua as linkAbort, vn as environmentGone, vr as attestRuntimeOwnedExecutor, vt as unconfirmedTeardowns, w as prepareScopeResume, wi as credentialCommandExit, wn as openNativeMirror, wr as inheritRuntimeOwnedExecutorAttestation, xn as captureProviderLiveWorkspace, yi as contentAddress, yr as attestRuntimeOwnedPendingExecutor, yt as waitForScopeChildren, zr as runtimeOwnedScopeOwnerRuntime } from "./scope-CJ7xtrs8.js";
+import { $i as sandboxEventServedBackend, $n as harnessTranscriptUnavailable, $r as runtimeProviderCode, $t as closesCursorSlot, A as nestedScopeSeamKey, Ai as createBudgetPool, An as WORKER_TRACE_PROPAGATION, Bi as sandboxOutputMarker, Br as runtimeOwnedScopeOwnerControl, Bt as bindScopeRetainedOwnerWorkspaceRetention, Cn as captureProviderWorkspaceSnapshot, Di as hashJson, Dr as knownMaterializationReceipt, Ei as turnFailurePolicy, En as workspaceCaptureReceipt, Er as knownExecutionBindingReceipt, Gi as assertSandboxServedModel, Gr as executableAgentSpecSnapshot, Gt as ownedTreeRootSpawn, Hr as unknownExecutionBindingReceipt, Ii as createSandboxToolPartState, Ir as runtimeOwnedExecutorExecutionBinding, Ji as createSandboxUsageLedger, Jn as HARNESS_TRANSCRIPT_SETTLE_TIMEOUT_MS, Jt as driverRuntime, Ki as canonicalSandboxUsageMode, Lr as runtimeOwnedExecutorMaterialization, Lt as scopeRetainedOwnerCheckpointing, Mn as workerTraceHeaders, Mr as recordRuntimeOwnedProviderDispatchNotStarted, Nr as recordRuntimeOwnedProviderIdentityConflict, Oi as credentialCommandExit, Or as newExecutionAttemptId, Pn as mergeTraceEnv, Pr as recordRuntimeOwnedProviderModel, Q as assertRecursiveReservationPolicy, Qi as sameModelId, Qn as harnessTranscriptFromLines, Qr as runtimeFailureRemediationSchema, Qt as SpawnEventIndex, R as appendSpawnEvents, Si as contentRef, Sn as captureProviderLiveWorkspace, T as sumSpendFromEvents, Ti as turnFailureOf, Tn as openNativeMirror, Tr as inheritRuntimeOwnedExecutorAttestation, Ur as unknownMaterializationReceipt, V as finalizeScopeOwnerMaterialization, Vi as sandboxProgressEvents, Vr as runtimeOwnedScopeOwnerRuntime, Vt as retainedOwnerWorkspaceRetentionSeamKey, Wi as extractTransportEventIdentity, Wr as executableAgentProfileSnapshot, Wt as loadSpawnForest, X as reenteredWorkers, Xi as isSandboxTerminalEvent, Xn as captureHarnessTranscript, Xr as runtimeFailureCause, Yr as reportedFailureCause, Yt as nestedDriverTreeRoot, Zi as notifySandboxEventObserver, Zt as encodeResultBlob, _i as unavailableResumeAt, _r as subscriptionUsageLimitSignal, _t as startScopeRecoveries, aa as RetainedRunProviderContractError, ai as isProvisioningRefusal, an as mintRetainedIdentity, ar as retainHarnessTranscript, at as hasRetriableTeardowns, br as attestRuntimeOwnedPendingExecutor, ca as exactSession, ci as retainedExecutorContext, cn as startRetainedRun, cr as describeToolArgs, da as sameControlCoordinates, di as UNAVAILABLE_STATUSES, dt as registerNestedTeardownScope, ea as sandboxTerminalUsageField, fa as RunCancellationReason, ft as releaseHeldEnvironments, gi as unavailablePauseMs, gt as settleManagerWork, ha as runAbortable, hi as reportedResetAt, ht as retryUnconfirmedTeardowns, ia as recordValue, ii as TRANSPORT_ERROR_CODES, in as assertRetainedRunReplayMaterial, it as closeScopeAdmission, jn as workerTraceEnv, jr as recordRuntimeOwnedProviderAttemptStart, jt as scopeRetainedOwnerSettled, ki as isCredentialRefusal, kn as resolveWorkerSlots, la as freezeControlRef, li as retainedExecutorSeamKey, ma as linkAbort, mi as printedStatus, mt as releaseRetainedEnvironments, ni as DISPATCH_NOT_ADMITTED_CODE, nn as describeRetainedNativeStops, oa as assertEventBinding, oi as isSchemaRejection, on as reconnectRetainedRun, pa as abortReason, pt as releaseManagerEnvironment, qi as createSandboxTurnEventCollector, qt as attestNestedDriverTreeOwner, ra as parseCodexUsageRecord, ri as RetainedExecutionPendingError, rn as stopRetainedNativeExecution, rt as closeRetainedSlots, sa as awaitAbortable, sn as recoverRetainedRun, sr as createActivityLog, t as createScope, ti as DISPATCH_EXECUTION_CHANGED_CODE, tn as verifyWorkspaceMarker, ua as isTerminalSessionStatus, ui as UNAVAILABLE_CODES, ur as isLiveNodeStatus, va as promptOptionsFromAgentTurnInput, vi as unavailableSignalOfFailure, vr as attestRuntimeOwnedDeferredExecutor, vt as unconfirmedTeardowns, w as prepareScopeResume, wi as executorFailureInfra, wn as nativeCopyDelayMs, wr as finalizeRuntimeOwnedPendingExecutor, xi as contentAddress, xn as assertProviderWorkspaceRetentionPort, yn as environmentGone, yr as attestRuntimeOwnedExecutor, yt as waitForScopeChildren, zi as sandboxLeafOutputFromEvents, zt as bindScopeRetainedOwnerProvider } from "./scope-JcCkUy_z.js";
 import { f as RuntimeRunStateError, i as ConfigError, m as ValidationError$1, r as BackendTransportError, t as AgentEvalError } from "./errors-AzSuGI23.js";
 import { $ as isAsyncIterable, J as deleteBoxSafe, Ot as teardownSurfaces, Q as isAbortError, St as armDeadlineTimer, Tt as isDeadlineAbortReason, U as addSpend, V as hasControlCharacter, W as addTokenUsage, Y as errorMessage, _t as ACCEPTED_RESULT_GRACE_MS, at as sleep, ct as throwIfAborted, dt as zeroSpend, et as mapWithConcurrency, ft as zeroTokenUsage, gt as withBudgetResources, it as roundBoxMinutes, lt as unmeteredSpend, nt as randomSuffix, ot as stringifySafe, pt as addResourceSpend, q as cloneTokenUsage, rt as randomUuid, st as throwAbort, tt as promptCacheTokenClasses, ut as withTimeout, xt as ROOT_DEADLINE_REASON } from "./workspace-streams-8ALHaZzx.js";
 import { t as runTaskQueue } from "./task-queue-DbpZAp6C.js";
-import { _ as errorText, d as detachedSnapshot, g as errorProperty, h as errorHttpStatus, l as sha256, m as errMessage, p as causeChain, v as defaultRedactor } from "./jsonl-file-CvPuwM0a.js";
+import { _ as errorText, d as detachedSnapshot, g as errorProperty, h as errorHttpStatus, l as sha256, m as errMessage, p as causeChain, v as defaultRedactor } from "./jsonl-file-CeVYTIQJ.js";
 import { _ as agentHarness, a as concreteProfileModel, c as profileModelExecutionSettings, d as assertRouterAutoDeclaration, f as assertRouterAutoResponse, g as observedModelMatchesDeclared, h as observedModelHasSnapshot, l as profileProviderModel, m as mergeObservedModelIdentity, o as enforceTokenLimits, s as profileBridgeWireModel, t as assertExecutableAgentProfile, u as resolveRouterRetryPolicy } from "./model-policy-JOcg3NRs.js";
 import { r as nativeSystemPrompt, t as assertSandboxProfileCompatibility } from "./sandbox-profile-compat-oFGWESLn.js";
 import { a as writeAtomicDurableFile, s as fenceRunWrite } from "./durable-file-DstVeHcj.js";
@@ -5591,13 +5591,7 @@ const causedByPartialFailure = (error) => causeChain(error).some((cause) => caus
 function abandonablePending(error) {
 	return error instanceof RetainedExecutionPendingError && (error.pendingCause === "unobservable" || error.pendingCause === "nested-recovery") ? error : void 0;
 }
-/**
-* Bridge error classes the bridge itself never retries: a request that fails identically on
-* every attempt, mapped below 5xx on its HTTP path (`parse_error` 400, the other two 501). On the
-* stream path the same failure arrives with no status at all — a profile that cannot materialize
-* is a `parse_error` — and the status split alone read it as a bad moment and re-drove it to the
-* attempt ceiling.
-*/
+/** Deterministic bridge refusals remain terminal even when transport omits HTTP status. */
 const DETERMINISTIC_BRIDGE_CODES = /* @__PURE__ */ new Set([
 	"parse_error",
 	"not_configured",
@@ -5612,15 +5606,7 @@ const DETERMINISTIC_BRIDGE_CODES = /* @__PURE__ */ new Set([
 */
 const CONTENT_FILTER_REASON = "refused by the model provider's content filter";
 const isContentFilterRefusal = (error) => causeChain(error).some((cause) => cause instanceof Error && /\bcontent was flagged for possible\b/iu.test(errorProperty(cause, "message") ?? ""));
-/**
-* A driver's harness turn ran to its terminal result, and that result reported failure.
-*
-* A provider executor returns a failed turn as an outcome; without this error it reads as a
-* completed drive and never reaches the retry decision (a turn ended `status code 524`).
-*
-* `errorCode` is the provider's machine code when it reported one. The classifier reads the code;
-* text decides only a printed capacity code and a content-filter refusal, which have none.
-*/
+/** A completed failed turn enters retry with its producer classification and legacy metadata intact. */
 var HarnessTurnFailedError = class extends Error {
 	runtime;
 	/** The failure as the harness reported it, before this error's framing. */
@@ -5629,11 +5615,13 @@ var HarnessTurnFailedError = class extends Error {
 	statusCode;
 	/** The shared HTTP error reader also uses this status for persisted diagnostics. */
 	status;
+	failure;
 	constructor(runtime, failure) {
 		super(`${runtime} harness turn ended with a failed outcome` + (failure.errorCode === void 0 ? "" : ` (${failure.errorCode})`) + `: ${failure.error}`);
 		this.name = "HarnessTurnFailedError";
 		this.runtime = runtime;
 		this.reported = failure.error;
+		if (failure.failure !== void 0) this.failure = failure.failure;
 		if (failure.errorCode !== void 0) this.errorCode = failure.errorCode;
 		if (failure.statusCode !== void 0) {
 			this.statusCode = failure.statusCode;
@@ -5665,23 +5653,21 @@ function isDispatchExecutionChanged(value) {
 		return false;
 	}
 }
-/**
-* The code or status that marks `error` as an upstream capacity refusal, or `undefined`.
-*
-* A structured field is read first: a turn outcome's `errorCode`, a transport error's
-* `upstreamCode` and `status`, a provider SDK error's `code` and `status`. The failure text is read
-* only as {@link unavailableSignalOfFailure} says, because a harness CLI reports the router's
-* refusal as text and Sandbox's held-room refusal shares its code with a shape that never fits.
-*/
+/** Read Runtime admission evidence before producer hints and legacy transport metadata. */
 function upstreamUnavailableSignal(error) {
 	if (undispatchedCredentialExit(error) !== void 0) return "credential-unavailable";
+	if (error instanceof CheckUnavailableError) return "check-unavailable";
+	if (error instanceof CoordinationUnreachableError) return "coordination-unreachable";
+	const typed = turnFailureOf(error);
+	if (typed) return turnFailurePolicy(typed).classification === "unavailable" ? subscriptionUsageLimitSignal({
+		error: "",
+		errorCode: typed.code
+	}) ?? typed.code : void 0;
 	const refusal = retainedAdmissionCause(error) ?? reconciliationCapacityRefusal(error);
 	if (refusal !== void 0) return upstreamUnavailableSignal(refusal);
 	if (!(error instanceof Error)) return void 0;
 	if (isCredentialRefusal(error)) return void 0;
 	if (isProviderSchemaRejection(error)) return void 0;
-	if (error instanceof CheckUnavailableError) return "check-unavailable";
-	if (error instanceof CoordinationUnreachableError) return "coordination-unreachable";
 	const transport = error instanceof BackendTransportError;
 	if (error instanceof AgentEvalError && !transport) return void 0;
 	const harness = error instanceof HarnessTurnFailedError;
@@ -5692,13 +5678,7 @@ function upstreamUnavailableSignal(error) {
 	};
 	return (harness ? subscriptionUsageLimitSignal(failure) : void 0) ?? unavailableSignalOfFailure(failure);
 }
-/**
-* The capacity refusal an admitted execution's reconciliation met: a cause with an upstream
-* capacity code or HTTP 429. The execution is unresolved, not failed, so the driver pauses and
-* reconciles it again, never abandoning it; a contract violation stays terminal (#1204).
-* magnetar-rust-sandbox-20261102a's managers met `TangleCredentialCapacityError: HTTP 429` on
-* 1,407 reconciliations, each classed transient.
-*/
+/** Capacity encountered while reconciling an admitted execution pauses that same execution. */
 function reconciliationCapacityRefusal(error) {
 	if (!(error instanceof RetainedExecutionPendingError) || error.phase !== "execution") return void 0;
 	if (error.pendingCause !== "unobservable" && error.pendingCause !== "transport") return void 0;
@@ -5714,21 +5694,10 @@ function ownCode(error) {
 		return;
 	}
 }
-/**
-* Classify one driver failure. Runtime's own typed refusals are decisions and stay terminal; an
-* upstream capacity refusal is `unavailable`; anything else foreign is an accident and is
-* retryable. A `BackendTransportError` is split by status because the taxonomy already promises
-* consumers may branch on it: a 5xx/408 is the upstream having a bad moment, a 429/503/529 is the
-* upstream out of capacity, and a 401/404/422 is a request that will fail identically forever. The
-* bridge's own never-retry classes are terminal whether or not a status rides with them.
-*
-* An `AbortError` is the run's own only when `signal` (the run) or `stopSignal` (the manager's own
-* stop: an accepted result, `stop`, a stop rule) has fired. Any other is a lost stream and is
-* retried: on magnetar-rust-20261019b a 4.0 h root turn ended "bridgeExecutor: turn aborted" and,
-* classed terminal, settled the run after one attempt.
-*/
+/** Runtime cancellation/contracts dominate producer policy; untyped foreign failures retain legacy rules. */
 function classifyDriverFailure(error, signal, stopSignal) {
 	if (signal?.aborted) return "terminal";
+	if (error instanceof CheckUnavailableError || error instanceof CoordinationUnreachableError) return "unavailable";
 	if (error instanceof RetainedExecutionPendingError && error.pendingCause === "provider-contract") return "terminal";
 	if (undispatchedCredentialExit(error) !== void 0) return "unavailable";
 	const admission = retainedAdmissionCause(error);
@@ -5739,6 +5708,9 @@ function classifyDriverFailure(error, signal, stopSignal) {
 	if (error instanceof Error && isProviderSchemaRejection(error)) return "terminal";
 	if (isCredentialRefusal(error)) return "terminal";
 	if (causeChain(error).some(isProvisioningRefusal)) return "terminal";
+	if (error instanceof AgentEvalError && !(error instanceof BackendTransportError)) return "terminal";
+	const typed = turnFailureOf(error);
+	if (typed) return turnFailurePolicy(typed).classification;
 	if (error instanceof HarnessTurnFailedError) {
 		if (error.errorCode !== void 0 && DETERMINISTIC_BRIDGE_CODES.has(error.errorCode)) return "terminal";
 		if (upstreamUnavailableSignal(error) !== void 0) return "unavailable";
@@ -5750,7 +5722,6 @@ function classifyDriverFailure(error, signal, stopSignal) {
 		const status = error.status;
 		return status === void 0 || status === 408 || status >= 500 ? "transient" : "terminal";
 	}
-	if (error instanceof AgentEvalError) return "terminal";
 	if (upstreamUnavailableSignal(error) !== void 0) return "unavailable";
 	return foreignHttpStatusVerdict(error) ?? "transient";
 }
@@ -5821,14 +5792,10 @@ const TRANSPORT_NAMES = /* @__PURE__ */ new Set([
 	"AbortError",
 	"RetainedStreamError"
 ]);
-/**
-* A transient failure's kind, read from typed fields on any cause, never its text. `infra` is a
-* transport that dropped, timed out or answered 408 or 5xx, and earns the outage bound; anything
-* else foreign is `deterministic`, an answer that repeats, and earns no window. Of 4,449 failed
-* attempts over the week to 2026-11-04, 2,019 were deterministic answers retried as transient
-* (a failed box's 409, a play repository's exit 128, an expired key's 401, a harness refusal).
-*/
+/** Producer infra earns the outage window; producer work earns only the bounded deterministic streak. */
 function transientFailureKind(error) {
+	const typed = turnFailureOf(error);
+	if (typed) return turnFailurePolicy(typed).failureKind;
 	if (causedByPartialFailure(error)) return "deterministic";
 	return causeChain(error).some((cause) => {
 		if (!(cause instanceof Error)) return false;
@@ -8576,13 +8543,15 @@ function providerFailureEvent(event, sandboxEvent) {
 	const detail = failureDetail(sandboxEvent.data) ?? failureDetail(outcome) ?? failureDetail(result) ?? (normalized?.type === "status" ? normalized.detail : void 0);
 	const errorCode = failureCode(sandboxEvent.data) ?? failureCode(outcome) ?? failureCode(result);
 	const statusCode = failureStatusCode(sandboxEvent.data) ?? failureStatusCode(outcome) ?? failureStatusCode(result);
+	const failure = turnFailureOf(sandboxEvent.data) ?? turnFailureOf(outcome) ?? turnFailureOf(result);
 	return {
 		type: "result",
 		data: {
 			status: "failed",
 			...detail ? { error: detail } : {},
 			...errorCode ? { errorCode } : {},
-			...statusCode === void 0 ? {} : { statusCode }
+			...statusCode === void 0 ? {} : { statusCode },
+			...failure === void 0 ? {} : { failure }
 		}
 	};
 }
@@ -8617,26 +8586,7 @@ function providerTerminalSuccess(event, sandboxEvent) {
 		result?.status
 	].some((status) => typeof status === "string" && TERMINAL_SUCCESS_STATUSES.has(status));
 }
-/**
-* Holds a stream's failure frames until it ends, so the terminal frame decides the outcome.
-*
-* The sandbox outcome tracker latches the first `error` frame as the run's error and settles
-* `failed` on it whatever the terminal frame says; and until this ledger existed the runtime
-* only ever showed the tracker its failure frames, so a terminal `success: true` was never in
-* evidence at all. A transport error that the harness recovered from — a stream break the
-* sidecar re-attached, a tool backend that failed once — therefore settled the whole child
-* `down` with the transient error as its reason, and the artifact the child had banked was
-* discarded. On the 2026-09-20 fleet corpus, 25 children that finished their work settled that
-* way.
-*
-* The rule: `error` frames are forgiven when the stream reports success and carries no verdict;
-* a failed status or a failed terminal frame is the provider's own verdict on the run, and once
-* one exists every failure frame is evidence again, in order, so the tracker names the first
-* `error` as it always did. The existing contracts hold unchanged: `status: failed` then
-* `done: {}` is failed, and the retained Claude tail `completed → failed → error → done` is
-* failed with the error frame's message. The forgiven frames stay in the event archive the trace
-* reads; only the outcome stops claiming them.
-*/
+/** Terminal success forgives recovered error frames; explicit failed verdicts retain their evidence. */
 function createProviderFailureLedger() {
 	const failures = [];
 	let verdicts = 0;
@@ -8655,7 +8605,12 @@ function createProviderFailureLedger() {
 			if (failures.length === 0 || verdicts === 0 && succeeded) return void 0;
 			const tracker = createAgentRunOutcomeTracker();
 			for (const frame of failures) tracker.observe(frame);
-			return tracker.finish();
+			const outcome = tracker.finish();
+			const failure = failures.slice().reverse().map((frame) => turnFailureOf(frame.data)).find((value) => value !== void 0);
+			return outcome === void 0 ? void 0 : {
+				...outcome,
+				...failure === void 0 ? {} : { failure }
+			};
 		}
 	};
 }
@@ -8853,13 +8808,19 @@ function exactQuotaRefusal(error) {
 	try {
 		const refusal = causeChain(error).find((cause) => Reflect.get(cause, "name") === "TangleCredentialCapacityError" && Reflect.get(cause, "code") === "provider_quota_exhausted");
 		if (refusal === void 0) return void 0;
+		const failure = turnFailureOf(refusal);
 		const resetAt = Reflect.get(refusal, "resetAt");
 		return {
 			text: "",
 			success: false,
 			error: `Subscription account capacity is unavailable${typeof resetAt === "string" ? ` until ${resetAt}` : ""}`,
 			errorCode: "provider_quota_exhausted",
-			statusCode: 429
+			statusCode: 429,
+			failure: failure ?? {
+				kind: "capacity",
+				code: "provider_quota_exhausted",
+				...typeof resetAt === "string" && Number.isFinite(Date.parse(resetAt)) ? { resetAt: new Date(resetAt).toISOString() } : {}
+			}
 		};
 	} catch {
 		return;
@@ -8955,6 +8916,7 @@ var RetainedObservation = class {
 				finalText: result.text,
 				success: result.success,
 				...result.error ? { error: result.error } : {},
+				...result.failure === void 0 ? {} : { failure: result.failure },
 				...result.errorCode ? {
 					errorCode: result.errorCode,
 					statusCode: result.statusCode
@@ -9006,7 +8968,10 @@ var RetainedObservation = class {
 				wake = setImmediate(() => {
 					const close = () => {
 						const flowing = this.sawTerminal ? 0 : RETAINED_TAIL_FLOW_MS - (Date.now() - this.lastObservedAt);
-						if (flowing <= 0) return resolve({ kind: "exact-result" });
+						if (flowing <= 0) {
+							wake = setImmediate(() => resolve({ kind: "exact-result" }));
+							return;
+						}
 						grace = setTimeout(() => {
 							wake = setImmediate(() => resolve({ kind: "exact-result" }));
 						}, flowing);
@@ -9119,7 +9084,10 @@ var RetainedObservation = class {
 				}
 				this.pendingRead = void 0;
 				if (observed.value.done) break;
-				if (this.acceptFrame(observed.value.value)) yield observed.value.value;
+				if (this.acceptFrame(observed.value.value)) {
+					yield observed.value.value;
+					this.lastObservedAt = Date.now();
+				}
 			}
 		} finally {
 			Promise.resolve().then(() => iterator?.return?.()).catch(() => void 0);
@@ -10021,6 +9989,7 @@ var ProviderTurnSettlement = class {
 		const statusCode = failureStatusCode(outcome);
 		const nativeFailure = outcome?.status === "failed" ? {
 			success: false,
+			...outcome.failure === void 0 ? {} : { failure: outcome.failure },
 			...outcome.error ? { error: outcome.error } : {},
 			...outcome.errorCode ? { errorCode: outcome.errorCode } : {},
 			...statusCode === void 0 ? {} : { statusCode }
@@ -10041,7 +10010,8 @@ var ProviderTurnSettlement = class {
 			});
 			if (signal !== void 0) this.unavailable = {
 				signal,
-				cause: errorText(nativeFailure.error ?? "")
+				cause: errorText(nativeFailure.error ?? ""),
+				...nativeFailure.failure ? { failure: nativeFailure.failure } : {}
 			};
 		}
 		if (this.retained) await args.retention?.onResult(settled);
@@ -10447,7 +10417,9 @@ async function pauseForContinuation(scope, invocation, ended, attempt, refusalsB
 	const continueInvocation = invocation.retention?.continueInvocation;
 	if (refusal === void 0 || continueInvocation === void 0 || state.workspacePreservationRequired || state.workspaceCaptureFailure !== void 0) return;
 	const refusalsInARow = ended.madeProgress ? 1 : refusalsBefore + 1;
-	const pauseMs = unavailablePauseMs(refusalsInARow, options.unavailablePause || {});
+	const now = Date.now();
+	const reset = unavailableResumeAt(reportedResetAt(refusal, now), now);
+	const pauseMs = reset === void 0 ? unavailablePauseMs(refusalsInARow, options.unavailablePause || {}) : Math.max(1e3, reset - now);
 	await invocation.retention?.onPause?.({
 		attempt,
 		signal: refusal.signal,
@@ -15195,7 +15167,7 @@ function singleShotDriver(maxIterations) {
 * model, process, limits, or backend behavior is detached and deeply frozen.
 * Explicit service/function fields remain live by reference because they are executable ports,
 * not portable configuration. */
-function snapshotExecutorConfig(config) {
+function snapshotExecutorConfig(config, mode = "execution") {
 	switch (config.backend) {
 		case "router-tools": {
 			const { complete, executeToolCall, onMessages, onToolStep, onProviderResponse, ...decisionData } = config;
@@ -15253,7 +15225,7 @@ function snapshotExecutorConfig(config) {
 			const { provider, registry, profileForCreate, taskToTurn, validator, workspaceRetention, shared, ...decisionData } = config;
 			if (shared !== void 0 && (decisionData.steering !== void 0 || decisionData.placements !== void 0 || workspaceRetention !== void 0)) throw new ValidationError$1("createExecutor(provider): shared placement cannot combine with steering, placements, or workspaceRetention");
 			const snapshot = detachedSnapshot(decisionData, "createExecutor provider config");
-			const resolvedProvider = resolveAgentEnvironmentProvider(provider, registry);
+			const resolvedProvider = mode === "control" && typeof provider === "string" ? registry?.get(provider) ?? provider : resolveAgentEnvironmentProvider(provider, registry);
 			return Object.freeze({
 				...snapshot,
 				provider: resolvedProvider,
@@ -16844,8 +16816,8 @@ function allSpawnedChildrenDown(tree) {
 }
 function poolExhausted(pool, opts) {
 	const r = pool.readout();
-	if (r.iterationsLeft <= 0) return true;
-	if (r.tokensLeft <= 0) return true;
+	if (r.iterationsCapped !== false && r.iterationsLeft <= 0) return true;
+	if (r.tokensCapped !== false && r.tokensLeft <= 0) return true;
 	return opts.budget.maxUsd !== void 0 && r.usdLeft <= 0;
 }
 function deadlinePassed(pool, opts) {
@@ -17129,7 +17101,7 @@ async function joinRunChildren(join, settleGraceMs) {
 	if (!persistence.failed && join.retainedAtSettlement === "release") join.teardownUnconfirmed = await releaseRetainedEnvironments(scope);
 	const releasing = !persistence.failed && join.retainedAtSettlement === "release";
 	await confirmRetriableTeardowns(join, releasing);
-	join.teardownUnconfirmed = [...join.teardownUnconfirmed, ...unrecoveredRetainedChildren(scope, join.resumeFrom)];
+	join.teardownUnconfirmed = await unrecoveredRetainedChildren(join);
 	for (const node of join.teardownUnconfirmed) await join.opts.journal.appendEvent(join.opts.runId, {
 		kind: "teardown-unconfirmed",
 		...unconfirmedRecord(node),
@@ -17138,6 +17110,112 @@ async function joinRunChildren(join, settleGraceMs) {
 	});
 	if (releasing) await closeRetainedSlots(scope);
 }
+/** Retained custody absent from the live scope, including a cold cancellation without ports. */
+async function unrecoveredRetainedChildren(join) {
+	const { scope, resumeFrom } = join;
+	const adopted = new Set(scope.view.nodes.map((node) => node.id));
+	const unrecovered = [];
+	for (const recovery of resumeFrom?.recoveries ?? []) {
+		if (adopted.has(recovery.spawned.id)) continue;
+		const environments = /* @__PURE__ */ new Map();
+		for (const admission of recovery.admissions) {
+			const environment = admission.phase === "environment" ? admission : admission.phase === "dispatched" ? admission.controlRef : void 0;
+			if (environment === void 0) continue;
+			const ref = {
+				provider: environment.provider,
+				environmentId: environment.environmentId,
+				keptFor: "evidence"
+			};
+			environments.set(JSON.stringify([ref.provider, ref.environmentId]), ref);
+		}
+		unrecovered.push({
+			id: recovery.spawned.id,
+			label: recovery.spawned.label,
+			runtime: recovery.spawned.runtime,
+			status: resumeFrom?.view.nodes.find((node) => node.id === recovery.spawned.id)?.status ?? "pending",
+			...environments.size === 0 ? {} : { kept: [...environments.values()] },
+			attempts: 0,
+			detail: "Retained child was not recovered before settlement; source evidence and teardown remain unverified."
+		});
+	}
+	const unconfirmed = new Map([...join.teardownUnconfirmed, ...unrecovered].map((node) => [node.id, node]));
+	if (resumeFrom === void 0 || !(join.opts.signal?.reason instanceof RunCancellationReason)) return [...unconfirmed.values()];
+	const forest = await loadSpawnForest(join.opts.journal, join.opts.runId);
+	const destroyed = /* @__PURE__ */ new Map();
+	const confirmed = /* @__PURE__ */ new Map();
+	const refs = /* @__PURE__ */ new Map();
+	const pending = /* @__PURE__ */ new Map();
+	const keyOf = (provider, environmentId) => JSON.stringify([provider, environmentId]);
+	const later = (proof, admission) => proof.tree === admission.tree ? proof.index > admission.index : Number.isFinite(proof.at) && Number.isFinite(admission.at) && proof.at > admission.at;
+	for (const [index, { treeRoot, event }] of forest.events.entries()) {
+		const position = {
+			tree: treeRoot,
+			index,
+			at: Date.parse(event.at)
+		};
+		const invocation = JSON.stringify([treeRoot, event.id]);
+		if (event.kind === "environment-teardown" && event.destroyed) {
+			const key = keyOf(event.provider, event.environmentId);
+			destroyed.set(key, [...destroyed.get(key) ?? [], position]);
+		}
+		if (event.kind === "teardown-confirmed") confirmed.set(event.id, [...confirmed.get(event.id) ?? [], position]);
+		if (event.kind === "execution-input" || event.kind === "execution-result" || event.kind === "execution-abandoned") pending.delete(invocation);
+		if (event.kind !== "execution-admitted") continue;
+		const admission = event.admission;
+		const environment = admission.phase === "environment" ? admission : admission.phase === "dispatched" ? admission.controlRef : void 0;
+		if (environment === void 0) {
+			pending.set(invocation, {
+				id: event.id,
+				position
+			});
+			continue;
+		}
+		pending.delete(invocation);
+		const held = refs.get(event.id) ?? /* @__PURE__ */ new Map();
+		const key = keyOf(environment.provider, environment.environmentId);
+		const custody = held.get(key) ?? {
+			ref: {
+				provider: environment.provider,
+				environmentId: environment.environmentId,
+				keptFor: "evidence"
+			},
+			admissions: /* @__PURE__ */ new Map()
+		};
+		custody.admissions.set(treeRoot, position);
+		held.set(key, custody);
+		refs.set(event.id, held);
+	}
+	const discharged = (id, key, custody) => [...custody.admissions.values()].every((admission) => [...destroyed.get(key) ?? [], ...confirmed.get(id) ?? []].some((proof) => later(proof, admission)));
+	const unknown = new Set([...pending.values()].filter(({ id, position }) => !(confirmed.get(id) ?? []).some((proof) => later(proof, position))).map(({ id }) => id));
+	for (const [id, node] of unconfirmed) {
+		if (node.attempts !== 0 || node.environments?.length || !node.kept?.length || unknown.has(id)) continue;
+		if (node.kept.every((ref) => {
+			const key = keyOf(ref.provider, ref.environmentId);
+			const custody = refs.get(id)?.get(key);
+			return custody !== void 0 && discharged(id, key, custody);
+		})) unconfirmed.delete(id);
+	}
+	for (const node of forest.nodes) {
+		const kept = [...refs.get(node.id) ?? []].filter(([key, custody]) => !discharged(node.id, key, custody)).map(([, custody]) => custody.ref);
+		if (kept.length === 0 && !unknown.has(node.id)) continue;
+		const prior = unconfirmed.get(node.id);
+		const covered = new Set([...prior?.kept ?? [], ...prior?.environments ?? []].map((ref) => keyOf(ref.provider, ref.environmentId)));
+		const missing = kept.filter((ref) => !covered.has(keyOf(ref.provider, ref.environmentId)));
+		if (prior !== void 0 && missing.length === 0) continue;
+		unconfirmed.set(node.id, {
+			...prior ?? {
+				id: node.id,
+				label: node.label,
+				runtime: node.runtime,
+				status: node.status,
+				attempts: 0
+			},
+			...(prior?.kept?.length ?? 0) + missing.length > 0 ? { kept: [...prior?.kept ?? [], ...missing] } : {},
+			detail: prior?.detail ?? "Prior admitted execution has no confirmed teardown; source custody remains unverified."
+		});
+	}
+	return [...unconfirmed.values()];
+}
 /**
 * A first teardown that failed or answered late is not the provider's last word, and a run that
 * settles over it leaves the sandbox running: cancelling 20 Discovery lanes
@@ -17166,35 +17244,6 @@ async function confirmRetriableTeardowns(join, releasing) {
 		});
 	}
 }
-/** Retained children a resume restored from the journal but never adopted into the live scope. */
-function unrecoveredRetainedChildren(scope, resumeFrom) {
-	const adopted = new Set(scope.view.nodes.map((node) => node.id));
-	const unrecovered = [];
-	for (const recovery of resumeFrom?.recoveries ?? []) {
-		if (adopted.has(recovery.spawned.id)) continue;
-		const environments = /* @__PURE__ */ new Map();
-		for (const admission of recovery.admissions) {
-			const environment = admission.phase === "environment" ? admission : admission.phase === "dispatched" ? admission.controlRef : void 0;
-			if (environment === void 0) continue;
-			const ref = {
-				provider: environment.provider,
-				environmentId: environment.environmentId,
-				keptFor: "evidence"
-			};
-			environments.set(JSON.stringify([ref.provider, ref.environmentId]), ref);
-		}
-		unrecovered.push({
-			id: recovery.spawned.id,
-			label: recovery.spawned.label,
-			runtime: recovery.spawned.runtime,
-			status: resumeFrom?.view.nodes.find((node) => node.id === recovery.spawned.id)?.status ?? "pending",
-			...environments.size === 0 ? {} : { kept: [...environments.values()] },
-			attempts: 0,
-			detail: "Retained child was not recovered before settlement; source evidence and teardown remain unverified."
-		});
-	}
-	return unrecovered;
-}
 // src/runtime/supervise/supervisor-run-tree.ts
 async function openRunTree(opts, now) {
 	const rootAttemptId = newExecutionAttemptId(opts.runId);
@@ -17294,6 +17343,11 @@ function createSupervisor() {
 			const journal = wrapJournalForBreaker(opts.journal, breaker);
 			const scope = createRootScope(intake, opened, journal, now);
 			const openScope = scope;
+			const ownerControl = runtimeOwnedScopeOwnerControl(root);
+			if (ownerControl !== void 0) {
+				bindScopeRetainedOwnerProvider(openScope, ownerControl.provider, ownerControl.checkpointCapture);
+				bindScopeRetainedOwnerWorkspaceRetention(openScope, ownerControl.checkpointCapture !== void 0);
+			}
 			if (rootLease) rootLease.bind({
 				scope: openScope,
 				cascadeAbort: (reason) => cascade.abort(new RunCancellationReason("root-handle", reason ?? "root handle aborted")),
@@ -17449,11 +17503,15 @@ async function executeRoot(root) {
 	let executionAborted = controller.signal.aborted;
 	let allChildrenDownAtSettle = false;
 	let parked = false;
+	let rootStarted = false;
 	try {
 		await startScopeRecoveries(scope);
 		actOutcome = {
 			ok: true,
-			out: await runAbortable(root.run, controller.signal, "supervisor aborted")
+			out: await runAbortable(() => {
+				rootStarted = true;
+				return root.run();
+			}, controller.signal, "supervisor aborted")
 		};
 	} catch (error) {
 		if (error instanceof RunParkedError && error.runId === opts.runId) {
@@ -17480,7 +17538,7 @@ async function executeRoot(root) {
 					error
 				};
 			}
-			if (!persistence.failed) try {
+			if (rootStarted && !persistence.failed) try {
 				await finalizeScopeOwnerMaterialization(scope);
 			} catch (error) {
 				if (actOutcome?.ok !== false) actOutcome = {
@@ -17585,4 +17643,4 @@ async function noWinner(settled, rejection) {
 }
 export { DEFAULT_PEER_MAIL_LIMITS as $, promptModelProfileMaterialization as $t, createSandboxForSpec as A, bridgeModelRouteRefusal as At, createRouterTranscript as B, defaultRunCommand as Bt, createExecutor as C, admitContinuationPolicy as Ct, runAgentRounds as D, failedItems as Dt, createSteerableSandboxSession as E, createContinuationKeeper as Et, codeModeArguments as F, harnessUsageIsEmpty as Ft, LEAF_CONTINUATION_TASK as G, terminateProcessTreeAndConfirm as Gt, createAgentEnvironmentProviderRegistry as H, runWorktreeHarness as Ht, codeModeModelOutput as I, readCodexRolloutSession as It, createInPlaceCliExecutor as J, controlProfileMaterialization as Jt, providerAsSandboxClient as K, assertProfileMaterialization as Kt, createCodeModeTools as L, createPushTraceSource as Lt, acquireSandbox as M, ROUTER_PRICE_SOURCE as Mt, TERMINAL_DECISIONS as N, addHarnessUsage as Nt, assertBoxlessPromptOptions as O, isFiniteNumber as Ot, defaultSelectWinner as P, createCodexRolloutStoreReader as Pt, AUTHORITY_MARKERS as Q, promptControlProfileMaterialization as Qt, runCodeMode as R, bridgeRuntimeAttachmentsKey as Rt, captureReusableExecutorConfig as S, CONTINUATIONS_DIR as St, DEFAULT_SANDBOX_STEERING_MAX_TURNS as T, checkVerdictOf as Tt, resolveAgentEnvironmentProvider as U, LOCAL_HARNESSES as Ut, routerBrain as V, runSettledCommand as Vt, providerAsExecutor as W, harnessInvocation as Wt, createInbox as X, fullProfileMaterialization as Xt, INBOX_RECEIPT_KEY as Y, defineProfileMaterializationContract as Yt, failPendingAfter as Z, profileMaterializationAxes$1 as Zt, withDriverExecutor as _, CheckUnavailableError as _t, assertRunParking as a, projectSandboxOutcome as an, peerMailVerbNames as at, createExecutorRegistry as b, mapExecutorResult as bt, sleepScopeWait as c, HarnessTurnFailedError as ct, runFinalizer as d, isContentFilterRefusal as dt, renderUnsupported as en, PEER_MAIL_WIRE_KEY as et, runTree as f, summarizeDriverAttempts as ft, isDriverSpec as g, preflightPublicCoordination as gt, driverExecutorFactory as h, upstreamUnavailableSignal as ht, RunParkedError as i, worktreeCliProfileMaterialization as in, peerMailTools as it, createSandboxLineage as j, priceTokens as jt, readPromptOptions as k, bridgeAdmissionRefusal as kt, withRunParking as l, abandonablePending as lt, driverChild as m, undispatchedCredentialExit as mt, createSupervisor as n, sandboxProfileMaterialization as nn, createPeerMailbox as nt, bindScopeParkingDrain as o, readSandboxOutcome as on, taskToPrompt$1 as ot, createRootHandle as p, transientFailureKind as pt, createWorktreeCliExecutor as q, assertProfileMaterializes as qt, assertResumeLimits as r, unsupportedProfileDimensions as rn, isPeerMailEnvelope as rt, readRunParking as s, DriverAttemptsExhaustedError as st, DEFAULT_MAX_DEPTH as t, sandboxActProfileMaterialization as tn, claimsAuthority as tt, bestDelivered as u, classifyDriverFailure as ut, InMemoryResultBlobStore as v, gateFactoryOnDeliverable as vt, snapshotExecutorConfig as w, bestComposite as wt, bindReusableExecutorExecutionId as x, verdictFromJudgeScore as xt, InMemorySpawnJournal as y, gateOnDeliverable as yt, toolResultText as z, bridgeStopSignalKey as zt };
 
-//# sourceMappingURL=supervisor-CwANBb9-.js.map
+//# sourceMappingURL=supervisor-B-bX69uL.js.map