@tangle-network/agent-runtime 4.0.0 → 6.0.1

package/dist/run-state-ByHiAjUs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-state-ByHiAjUs.js","names":["delay"],"sources":["../src/durable/run-lock.ts","../src/durable/spawn-journal/read.ts","../src/durable/run-state.ts"],"sourcesContent":["import {\n  closeSync,\n  existsSync,\n  fstatSync,\n  mkdirSync,\n  openSync,\n  readFileSync,\n  unlinkSync,\n} from 'node:fs'\nimport { resolve } from 'node:path'\nimport { setTimeout as delay } from 'node:timers/promises'\nimport {\n  type LockHolderRecord,\n  type LockIdentity,\n  lockHolderVerdict,\n  lockIdentity,\n  parseLockHolderRecord,\n  readLockHolderIdentity,\n} from '@tangle-network/agent-eval/lock-holder'\nimport {\n  publishExclusiveDurableFile,\n  writeAtomicDurableFile,\n} from '../runtime/supervise/durable-file'\nimport { isNoEntError } from './jsonl-file'\nimport { mutateRunClaim, runGenerationPath, runWithWriteClaim } from './run-fence'\n\n/*\n * Exclusive ownership of one durable run directory for the life of one `supervisePursuit` call.\n *\n * Measured motive (discovery-lab recursive smoke r1): the recovery protocol is\n * `SIGKILL` the runner while a child is live, then resume on the same directory. PID 1527 was\n * killed at 06:20:27Z and PID 2058 resumed at 06:24:59Z. Nothing refused a second process while\n * the first was still alive; two processes on one directory both append to `spawn-journal.jsonl`\n * and `observer.jsonl`, and the recorded assignment keys and settlements stop being one sequence.\n * The operator relied on timing. This lock makes the second process refuse and name the holder.\n *\n * The holder is identified by its pid and the OS's start token for that pid. r1 ran in a\n * container whose pids are small (1527, 2058) and restart from 1, so a pid alone names the wrong\n * process after enough spawns: a lock left by a killed run would then match an unrelated live\n * process and hold the directory until an operator removed the file. Whether a holder is dead is\n * agent-eval's one dead-owner rule (`@tangle-network/agent-eval/lock-holder`): the record carries\n * the start token, host, boot id, pid namespace and the lock file's own inode identity, and a\n * holder is reclaimed only when those prove it gone or its pid reused. A record that cannot prove\n * that, such as one written before these fields existed, is refused and is removed by hand.\n *\n * The lock is operational state, not evidence: replay, projection, and the settle record ignore\n * it. A holder whose process is gone is reclaimed through Eval's crash-recoverable mutation lock.\n */\n\n/** The lock file `supervisePursuit` holds inside a run directory for the life of one call. */\nexport const RUN_DIRECTORY_LOCK_FILE = 'supervise.lock'\n\n/** What the lock file records about its holder. */\nexport interface RunDirectoryLockHolder {\n  readonly pid: number\n  /** Monotonic acquisition generation; absent on legacy lock records. */\n  readonly generation?: number\n  /** ISO instant the holder took the lock. */\n  readonly startedAt: string\n  readonly runId: string\n  /** The OS's start token for `pid` when the host reports one. A holder without one is never proved dead. */\n  readonly processStart?: string\n  /** Hostname of the holder. Records written before it existed are never proved dead. */\n  readonly host?: string\n  readonly bootId?: string\n  readonly pidNamespace?: string\n  /** Inode identity of the lock file this record was written into. */\n  readonly lock?: LockIdentity\n}\n\n/** A held lock. `release()` removes the file; it is safe to call more than once. */\nexport interface RunDirectoryLock extends RunDirectoryLockHolder {\n  readonly generation: number\n  readonly path: string\n  /** Bind durable writes to this acquisition, including work queued before release. */\n  run<T>(operation: () => T): T\n  release(): Promise<void>\n}\n\n/** The directory is held by a live process. `holder` is what that process recorded. */\nexport class RunDirectoryLockedError extends Error {\n  readonly path: string\n  readonly holder: RunDirectoryLockHolder\n\n  constructor(path: string, holder: RunDirectoryLockHolder) {\n    super(\n      `supervisePursuit: ${path} is held by pid ${holder.pid} (run '${holder.runId}', since ${holder.startedAt}); one process drives a run directory at a time`,\n    )\n    this.name = 'RunDirectoryLockedError'\n    this.path = path\n    this.holder = holder\n  }\n}\n\n/**\n * Take `runDir/supervise.lock`, or refuse.\n *\n * The file is published with its full content or not at all, so a contender never reads a\n * half-written holder. A lock whose holder is proved dead (its pid no longer exists, the pid now\n * belongs to a process with a different start token, or the host rebooted) is stale and is removed\n * under the mutation guard; a holder that is alive or cannot be proved dead refuses. An empty file\n * names no holder and is reclaimed. A file with unreadable content is left in place and refused:\n * reclaiming it could evict a live holder written by something other than this module.\n */\nexport async function acquireRunDirectoryLock(\n  runDir: string,\n  runId: string,\n  now: () => number = Date.now,\n): Promise<RunDirectoryLock> {\n  const dir = resolve(runDir)\n  const path = resolve(dir, RUN_DIRECTORY_LOCK_FILE)\n  mkdirSync(dir, { recursive: true })\n  const { pid, ...identity } = readLockHolderIdentity(process.pid)\n  const owner = { pid, startedAt: new Date(now()).toISOString(), runId, ...identity }\n  return mutateRunClaim(path, () => {\n    const existing = readLockFile(path)\n    if (existing.state === 'holder' && !holderIsDead(existing)) {\n      throw new RunDirectoryLockedError(path, existing.holder)\n    }\n    let previousGeneration = 0\n    try {\n      previousGeneration = Number(readFileSync(runGenerationPath(dir), 'utf8'))\n      if (!Number.isSafeInteger(previousGeneration) || previousGeneration < 1) {\n        throw new Error('invalid run directory generation counter')\n      }\n    } catch (error) {\n      if (!isNoEntError(error)) throw error\n    }\n    const generation =\n      Math.max(\n        previousGeneration,\n        existing.state === 'holder' ? (existing.holder.generation ?? 0) : 0,\n      ) + 1\n    if (!Number.isSafeInteger(generation)) throw new Error('run directory generation exhausted')\n    writeAtomicDurableFile(runGenerationPath(dir), `${generation}\\n`)\n    if (existing.state !== 'missing') removeIfPresent(path)\n    const written: { holder?: RunDirectoryLockHolder } = {}\n    // The lock file is a hard link of the temporary file, so the temporary file's inode identity\n    // is the lock's, and a later verdict can prove this record was written for this very lock.\n    const published = publishExclusiveDurableFile(path, (file) => {\n      written.holder = Object.freeze({ ...owner, generation, lock: lockIdentity(file) })\n      return `${JSON.stringify(written.holder)}\\n`\n    })\n    const holder = written.holder\n    if (!published || holder === undefined) {\n      throw new Error(`supervisePursuit: could not take ${path}`)\n    }\n    let released = false\n    return Object.freeze({\n      ...holder,\n      generation,\n      path,\n      run: <T>(operation: () => T): T => {\n        if (holder.lock === undefined) throw new Error('run lock has no inode identity')\n        return runWithWriteClaim({ path, generation, lock: holder.lock }, operation)\n      },\n      release: async () => {\n        if (released) return\n        await releaseHolder(path, holder)\n        released = true\n      },\n    })\n  })\n}\n\n/** Read the holder a lock file names, or `undefined` when no lock file names one. */\nexport async function readRunDirectoryLock(\n  runDir: string,\n): Promise<RunDirectoryLockHolder | undefined> {\n  const existing = await readLockFile(resolve(runDir, RUN_DIRECTORY_LOCK_FILE))\n  return existing.state === 'holder' ? existing.holder : undefined\n}\n\n/** What {@link runDirectoryHolderIsLive} proved about a run directory's recorded holder. */\nexport interface RunDirectoryHolderLiveness {\n  /** False only when the holder that took the lock is proved dead; a holder that cannot be proved dead reads as live. */\n  readonly live: boolean\n  /** The holder could not be verified on this host. `live` stays conservative for exclusion. */\n  readonly unknown?: true\n  /** The holder the lock file names. Absent when no lock file names one, which reads as not live. */\n  readonly holder?: RunDirectoryLockHolder\n}\n\n/**\n * Whether a run directory is still held by the live process that took its lock.\n *\n * The same rule `acquireRunDirectoryLock` applies to decide whether a lock is stale, exposed so a\n * caller — a supervisor picking up an abandoned directory, an operator tool listing runs — asks\n * the question instead of hand-rolling `process.kill(pid, 0)`. A bare signal probe cannot tell a\n * live holder from an unrelated process that later took the same pid, which is the failure this\n * lock's start token exists to prevent.\n *\n * The answer is ADVISORY: it is read outside the mutation guard `acquireRunDirectoryLock` holds,\n * so a `false` can be stale by the time the caller acts on it and a concurrent acquire can take\n * the directory in between. Reporting and listing are what this is for. A caller that intends to\n * TAKE the directory calls `acquireRunDirectoryLock`, which evaluates the same rule under the\n * guard and refuses atomically.\n */\nexport async function runDirectoryHolderIsLive(\n  runDir: string,\n): Promise<RunDirectoryHolderLiveness> {\n  const existing = await readLockFile(resolve(runDir, RUN_DIRECTORY_LOCK_FILE))\n  if (existing.state !== 'holder') return { live: false }\n  const verdict = lockHolderVerdict(existing.record, existing.current)\n  return {\n    live: verdict.liveness !== 'dead',\n    holder: existing.holder,\n    ...(verdict.liveness === 'unknown' ? { unknown: true as const } : {}),\n  }\n}\n\ntype LockFileState =\n  | { readonly state: 'missing' }\n  | { readonly state: 'empty' }\n  | {\n      readonly state: 'holder'\n      readonly holder: RunDirectoryLockHolder\n      /** The holder as agent-eval's rule reads it; absent when the record names no host. */\n      readonly record: LockHolderRecord | undefined\n      /** Inode identity of the file the holder was read from. */\n      readonly current: LockIdentity\n    }\n\nfunction readLockFile(path: string): LockFileState {\n  let text: string\n  let current: LockIdentity\n  try {\n    const file = openSync(path, 'r')\n    try {\n      current = lockIdentity(fstatSync(file, { bigint: true }))\n      text = readFileSync(file, 'utf8')\n    } finally {\n      closeSync(file)\n    }\n  } catch (error) {\n    if (isNoEntError(error)) return { state: 'missing' }\n    throw error\n  }\n  // This module publishes the file with its full content or not at all, so an empty file was\n  // not left by a live holder.\n  if (text.trim().length === 0) return { state: 'empty' }\n  let parsed: unknown\n  try {\n    parsed = JSON.parse(text)\n  } catch (cause) {\n    throw new Error(`supervisePursuit: ${path} is not a readable lock file; remove it by hand`, {\n      cause,\n    })\n  }\n  const record = parsed as Partial<RunDirectoryLockHolder> | null\n  if (\n    typeof record !== 'object' ||\n    record === null ||\n    typeof record.pid !== 'number' ||\n    !Number.isInteger(record.pid) ||\n    record.pid <= 0 ||\n    typeof record.startedAt !== 'string' ||\n    typeof record.runId !== 'string' ||\n    (record.processStart !== undefined && typeof record.processStart !== 'string') ||\n    (record.generation !== undefined &&\n      (!Number.isSafeInteger(record.generation) || record.generation < 1))\n  ) {\n    throw new Error(`supervisePursuit: ${path} is not a readable lock file; remove it by hand`)\n  }\n  const { pid, startedAt, runId, processStart } = record\n  // A missing or malformed identity field is dropped, which leaves the holder never provably dead.\n  const verdictRecord = parseLockHolderRecord(parsed)\n  const { pid: _pid, ...identity } = verdictRecord ?? { pid }\n  return {\n    state: 'holder',\n    holder: Object.freeze({\n      pid,\n      startedAt,\n      runId,\n      ...(record.generation === undefined ? {} : { generation: record.generation }),\n      ...(processStart === undefined ? {} : { processStart }),\n      ...identity,\n    }),\n    record: verdictRecord,\n    current,\n  }\n}\n\n/** agent-eval's dead-owner rule: only a holder proved dead is stale; alive or unknown stays held. */\nfunction holderIsDead(existing: Extract<LockFileState, { state: 'holder' }>): boolean {\n  return lockHolderVerdict(existing.record, existing.current).liveness === 'dead'\n}\n\n/** Remove the lock only while it still names this holder; a reclaimed lock belongs to its new owner. */\nasync function releaseHolder(path: string, holder: RunDirectoryLockHolder): Promise<void> {\n  const deadline = performance.now() + 1_000\n  while (existsSync(`${path}.guard`) && performance.now() < deadline) await delay(10)\n  mutateRunClaim(path, () => {\n    const existing = readLockFile(path)\n    if (existing.state !== 'holder') return\n    if (\n      existing.holder.pid !== holder.pid ||\n      existing.holder.startedAt !== holder.startedAt ||\n      existing.holder.runId !== holder.runId ||\n      existing.holder.processStart !== holder.processStart ||\n      existing.holder.generation !== holder.generation ||\n      existing.holder.lock?.dev !== holder.lock?.dev ||\n      existing.holder.lock?.ino !== holder.lock?.ino ||\n      existing.holder.lock?.birthtimeNs !== holder.lock?.birthtimeNs\n    )\n      return\n    removeIfPresent(path)\n  })\n}\n\nfunction removeIfPresent(path: string): void {\n  try {\n    unlinkSync(path)\n  } catch (error) {\n    if (!isNoEntError(error)) throw error\n  }\n}\n","import { createHash } from 'node:crypto'\nimport type { BigIntStats } from 'node:fs'\nimport { type FileHandle, open, stat } from 'node:fs/promises'\nimport { join } from 'node:path'\nimport { isRecord } from '@tangle-network/agent-core'\nimport type { NodeId, SpawnEvent } from '../../runtime/supervise/types'\nimport { isNoEntError, readCommittedJsonLines } from '../jsonl-file'\nimport { spawnJournalRecordEvents } from './record-events'\n\n/** Serializable checkpoint of a committed byte boundary, bound to one file and its bytes. */\nexport interface SpawnJournalCursor {\n  readonly file: string\n  readonly offset: number\n  readonly boundary: string\n}\n\n/** Physical groups expand to event records; the owning tree is preserved for every event. */\nexport type SpawnJournalReadRecord =\n  | { readonly kind: 'begin'; readonly root: NodeId; readonly at: string }\n  | { readonly kind: 'event'; readonly root: NodeId; readonly event: SpawnEvent }\n\nexport interface SpawnJournalReadOptions {\n  readonly after?: SpawnJournalCursor\n  /** Initial opening-and-tail window, or an incremental page's byte budget. A crossing record\n   * is read whole, so one large record can exceed this budget. Omit for complete history. */\n  readonly tailBytes?: number\n}\n\nexport interface SpawnJournalReadResult {\n  readonly records: ReadonlyArray<SpawnJournalReadRecord>\n  /** Absent only when the journal does not exist. Treat as opaque and persist unchanged. */\n  readonly cursor?: SpawnJournalCursor\n  /** The supplied cursor no longer matches; this page starts over. */\n  readonly reset: boolean\n  /** An initial opening-and-tail window omitted records between its two windows. */\n  readonly truncated: boolean\n  /** Bytes after the committed cursor in this snapshot, including an incomplete final write. */\n  readonly remainingBytes: number\n}\n\n/** Read a fixed journal prefix, with historical envelopes and framing owned by Runtime.\n * Missing journals return an empty page. Malformed committed records fail; incomplete final\n * writes remain unread for the next call. Cursors detect replacement, truncation and edits at\n * their sampled opening/boundary; they are not integrity proofs against arbitrary file edits.\n */\nexport async function readSpawnJournal(\n  runDir: string,\n  options: SpawnJournalReadOptions = {},\n): Promise<SpawnJournalReadResult> {\n  const { after, tailBytes } = options\n  if (tailBytes !== undefined && (!Number.isSafeInteger(tailBytes) || tailBytes < 1)) {\n    throw new RangeError('readSpawnJournal: tailBytes must be a positive safe integer')\n  }\n  const path = join(runDir, 'spawn-journal.jsonl')\n  let handle: FileHandle\n  try {\n    handle = await open(path, 'r')\n  } catch (error) {\n    if (isNoEntError(error)) {\n      return { records: [], reset: after !== undefined, truncated: false, remainingBytes: 0 }\n    }\n    throw error\n  }\n  try {\n    const snapshot = await handle.stat({ bigint: true })\n    if (!snapshot.isFile()) throw new Error(`${path}: expected a regular file`)\n    const size = Number(snapshot.size)\n    const file = identity(snapshot)\n    const resumed =\n      after !== undefined &&\n      after.file === file &&\n      Number.isSafeInteger(after.offset) &&\n      after.offset >= 0 &&\n      after.offset <= size &&\n      after.boundary === (await boundary(handle, after.offset))\n    let offset = resumed ? after.offset : 0\n    const records: SpawnJournalReadRecord[] = []\n    const read = async (start: number, end: number, firstOnly = false): Promise<void> => {\n      offset = start\n      for await (const record of readCommittedJsonLines<unknown>(path, {\n        handle,\n        start,\n        end,\n        strictUtf8: true,\n        onCommit: (committed) => {\n          offset = committed\n        },\n      })) {\n        if (!isRecord(record) || typeof record.root !== 'string') {\n          throw new Error(`${path}: spawn journal record has no root`)\n        }\n        if (record.kind === 'begin') {\n          if (typeof record.at !== 'string') throw new Error(`${path}: begin record has no at`)\n          records.push({ kind: 'begin', root: record.root, at: record.at })\n        } else {\n          for (const event of spawnJournalRecordEvents(record)) {\n            if (\n              !isRecord(event) ||\n              typeof event.kind !== 'string' ||\n              typeof event.id !== 'string'\n            ) {\n              throw new Error(`${path}: spawn journal record has no event identity`)\n            }\n            records.push({ kind: 'event', root: record.root, event })\n          }\n        }\n        if (firstOnly) break\n      }\n    }\n    let truncated = false\n    if (!resumed && tailBytes !== undefined && size > tailBytes) {\n      await read(0, size, true)\n      const openingEnd = offset\n      const tailStart = await lineBoundary(handle, size - tailBytes, size, -1)\n      truncated = tailStart > openingEnd\n      await read(Math.max(openingEnd, tailStart), size)\n      // A long torn tail must not hide the latest committed activity before it.\n      if (offset === tailStart && tailStart > openingEnd) {\n        const previous = await lineBoundary(handle, tailStart - 1, size, -1)\n        truncated = previous > openingEnd\n        await read(Math.max(openingEnd, previous), tailStart)\n      }\n    } else {\n      const end =\n        resumed && tailBytes !== undefined && size - offset > tailBytes\n          ? await lineBoundary(handle, offset + tailBytes, size, 1)\n          : size\n      await read(offset, end)\n    }\n    if (identity(await stat(path, { bigint: true })) !== file || (await handle.stat()).size < size)\n      throw new Error(`${path}: journal changed while reading its committed prefix`)\n    return {\n      records,\n      cursor: { file, offset, boundary: await boundary(handle, offset) },\n      reset: after !== undefined && !resumed,\n      truncated,\n      remainingBytes: size - offset,\n    }\n  } finally {\n    await handle.close()\n  }\n}\n\nfunction identity(info: BigIntStats): string {\n  return `${info.dev}:${info.ino}:${info.birthtimeNs}`\n}\n\nasync function bytes(handle: FileHandle, start: number, length: number): Promise<Buffer> {\n  const buffer = Buffer.alloc(length)\n  const { bytesRead } = await handle.read(buffer, 0, length, start)\n  if (bytesRead !== length) throw new Error('spawn journal changed while reading its boundary')\n  return buffer\n}\n\nasync function boundary(handle: FileHandle, offset: number): Promise<string> {\n  const length = Math.min(offset, 128)\n  return createHash('sha256')\n    .update(await bytes(handle, 0, length))\n    .update(await bytes(handle, offset - length, length))\n    .digest('hex')\n}\n\n/** Include the record crossing a tail window or incremental page boundary. */\nasync function lineBoundary(\n  handle: FileHandle,\n  position: number,\n  size: number,\n  direction: -1 | 1,\n): Promise<number> {\n  while (position > 0 && position < size) {\n    const start = direction === -1 ? Math.max(0, position - 65_536) : position\n    const end = direction === -1 ? position : Math.min(size, position + 65_536)\n    const part = await bytes(handle, start, end - start)\n    const newline = direction === -1 ? part.lastIndexOf(10) : part.indexOf(10)\n    if (newline !== -1) return start + newline + 1\n    position = direction === -1 ? start : end\n  }\n  return position\n}\n","import type { RuntimeFailureCause } from '../runtime/failure-cause'\nimport { type RunCancelRequest, readRunCancelRequest } from '../runtime/supervise/run-cancellation'\nimport { readRunParking } from '../runtime/supervise/run-parking'\nimport type { SupervisedResult } from '../runtime/supervise/types'\nimport { runDirectoryHolderIsLive } from './run-lock'\nimport { readFailureRecord, readSettleRecord } from './settle-record'\nimport { readSpawnJournal } from './spawn-journal/read'\n\n/** Runtime evidence only. Product-specific launch, checks and trace completeness belong to callers. */\nexport interface RunState {\n  /** Absent when a recorded holder cannot be verified on this host. */\n  readonly phase?: 'running' | 'parked' | 'cancelling' | 'settled' | 'down'\n  /** A persisted typed root failure; legacy failure messages do not establish a code. */\n  readonly failureCode?: RuntimeFailureCause['code']\n  readonly settle?: SupervisedResult<unknown>\n  readonly cancelRequest?: RunCancelRequest\n  /** Absent when holder liveness is unknown. This is advisory, never ownership authorization. */\n  readonly holderLive?: boolean\n  /** Latest explicit Runtime timestamp observed, as ISO UTC; never a filesystem mtime. */\n  readonly lastActivityAt?: string\n}\n\n/** Compose maintained record readers. Terminal settlement outranks cancellation and parking;\n * a request remains cancelling until settlement. An unheld run with evidence is down.\n * No Runtime evidence (including a missing or empty directory) returns undefined. Reads are\n * advisory snapshots across independently published files, not a transaction or a resume gate.\n */\nexport async function readRunState(runDir: string): Promise<RunState | undefined> {\n  const [settle, failure, parking, holder, journal] = await Promise.all([\n    readSettleRecord(runDir),\n    readFailureRecord(runDir),\n    readRunParking(runDir),\n    runDirectoryHolderIsLive(runDir),\n    readSpawnJournal(runDir, { tailBytes: 65_536 }),\n  ])\n  const cancelRequest = readRunCancelRequest(runDir)\n  if (\n    !settle &&\n    !failure &&\n    !parking &&\n    !holder.holder &&\n    !cancelRequest &&\n    journal.records.length === 0\n  ) {\n    return undefined\n  }\n  const holderLive = holder.unknown ? undefined : holder.live\n  const phase = settle\n    ? 'settled'\n    : cancelRequest\n      ? 'cancelling'\n      : parking\n        ? 'parked'\n        : holderLive === true\n          ? 'running'\n          : holderLive === false\n            ? 'down'\n            : undefined\n  const root = settle?.tree.nodes?.find((node) => node.id === settle.tree.root)\n  const failureCode =\n    (settle?.kind === 'no-winner' && settle.reason === 'driver-failed'\n      ? settle.error?.failure?.code\n      : undefined) ?? root?.failure?.code\n  let latest: number | undefined\n  const observe = (at: string | number | undefined): void => {\n    const timestamp = at === undefined ? undefined : new Date(at).getTime()\n    if (timestamp !== undefined && Number.isFinite(timestamp)) {\n      latest = latest === undefined ? timestamp : Math.max(latest, timestamp)\n    }\n  }\n  observe(failure?.at)\n  observe(parking?.since)\n  observe(cancelRequest?.at)\n  observe(holder.holder?.startedAt)\n  for (const record of journal.records)\n    observe(record.kind === 'begin' ? record.at : record.event.at)\n  for (const node of settle?.tree.nodes ?? []) {\n    observe(node.spawnedAt)\n    observe(node.settledAt)\n  }\n  const lastActivityAt = latest === undefined ? undefined : new Date(latest).toISOString()\n  return {\n    ...(phase === undefined ? {} : { phase }),\n    ...(failureCode === undefined ? {} : { failureCode }),\n    ...(settle === undefined ? {} : { settle }),\n    ...(cancelRequest === undefined ? {} : { cancelRequest }),\n    ...(holderLive === undefined ? {} : { holderLive }),\n    ...(lastActivityAt === undefined ? {} : { lastActivityAt }),\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;AAkDA,MAAa,0BAA0B;;AA8BvC,IAAa,0BAAb,cAA6C,MAAM;CACjD;CACA;CAEA,YAAY,MAAc,QAAgC;EACxD,MACE,qBAAqB,KAAK,kBAAkB,OAAO,IAAI,SAAS,OAAO,MAAM,WAAW,OAAO,UAAU,gDAC3G;EACA,KAAK,OAAO;EACZ,KAAK,OAAO;EACZ,KAAK,SAAS;CAChB;AACF;;;;;;;;;;;AAYA,eAAsB,wBACpB,QACA,OACA,MAAoB,KAAK,KACE;CAC3B,MAAM,MAAM,QAAQ,MAAM;CAC1B,MAAM,OAAO,QAAQ,KAAK,uBAAuB;CACjD,UAAU,KAAK,EAAE,WAAW,KAAK,CAAC;CAClC,MAAM,EAAE,KAAK,GAAG,aAAa,uBAAuB,QAAQ,GAAG;CAC/D,MAAM,QAAQ;EAAE;EAAK,WAAW,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,YAAY;EAAG;EAAO,GAAG;CAAS;CAClF,OAAO,eAAe,YAAY;EAChC,MAAM,WAAW,aAAa,IAAI;EAClC,IAAI,SAAS,UAAU,YAAY,CAAC,aAAa,QAAQ,GACvD,MAAM,IAAI,wBAAwB,MAAM,SAAS,MAAM;EAEzD,IAAI,qBAAqB;EACzB,IAAI;GACF,qBAAqB,OAAO,aAAa,kBAAkB,GAAG,GAAG,MAAM,CAAC;GACxE,IAAI,CAAC,OAAO,cAAc,kBAAkB,KAAK,qBAAqB,GACpE,MAAM,IAAI,MAAM,0CAA0C;EAE9D,SAAS,OAAO;GACd,IAAI,CAAC,aAAa,KAAK,GAAG,MAAM;EAClC;EACA,MAAM,aACJ,KAAK,IACH,oBACA,SAAS,UAAU,WAAY,SAAS,OAAO,cAAc,IAAK,CACpE,IAAI;EACN,IAAI,CAAC,OAAO,cAAc,UAAU,GAAG,MAAM,IAAI,MAAM,oCAAoC;EAC3F,uBAAuB,kBAAkB,GAAG,GAAG,GAAG,WAAW,GAAG;EAChE,IAAI,SAAS,UAAU,WAAW,gBAAgB,IAAI;EACtD,MAAM,UAA+C,CAAC;EAGtD,MAAM,YAAY,4BAA4B,OAAO,SAAS;GAC5D,QAAQ,SAAS,OAAO,OAAO;IAAE,GAAG;IAAO;IAAY,MAAM,aAAa,IAAI;GAAE,CAAC;GACjF,OAAO,GAAG,KAAK,UAAU,QAAQ,MAAM,EAAE;EAC3C,CAAC;EACD,MAAM,SAAS,QAAQ;EACvB,IAAI,CAAC,aAAa,WAAW,KAAA,GAC3B,MAAM,IAAI,MAAM,oCAAoC,MAAM;EAE5D,IAAI,WAAW;EACf,OAAO,OAAO,OAAO;GACnB,GAAG;GACH;GACA;GACA,MAAS,cAA0B;IACjC,IAAI,OAAO,SAAS,KAAA,GAAW,MAAM,IAAI,MAAM,gCAAgC;IAC/E,OAAO,kBAAkB;KAAE;KAAM;KAAY,MAAM,OAAO;IAAK,GAAG,SAAS;GAC7E;GACA,SAAS,YAAY;IACnB,IAAI,UAAU;IACd,MAAM,cAAc,MAAM,MAAM;IAChC,WAAW;GACb;EACF,CAAC;CACH,CAAC;AACH;;AAGA,eAAsB,qBACpB,QAC6C;CAC7C,MAAM,WAAW,MAAM,aAAa,QAAQ,QAAQ,uBAAuB,CAAC;CAC5E,OAAO,SAAS,UAAU,WAAW,SAAS,SAAS,KAAA;AACzD;;;;;;;;;;;;;;;;AA2BA,eAAsB,yBACpB,QACqC;CACrC,MAAM,WAAW,MAAM,aAAa,QAAQ,QAAQ,uBAAuB,CAAC;CAC5E,IAAI,SAAS,UAAU,UAAU,OAAO,EAAE,MAAM,MAAM;CACtD,MAAM,UAAU,kBAAkB,SAAS,QAAQ,SAAS,OAAO;CACnE,OAAO;EACL,MAAM,QAAQ,aAAa;EAC3B,QAAQ,SAAS;EACjB,GAAI,QAAQ,aAAa,YAAY,EAAE,SAAS,KAAc,IAAI,CAAC;CACrE;AACF;AAcA,SAAS,aAAa,MAA6B;CACjD,IAAI;CACJ,IAAI;CACJ,IAAI;EACF,MAAM,OAAO,SAAS,MAAM,GAAG;EAC/B,IAAI;GACF,UAAU,aAAa,UAAU,MAAM,EAAE,QAAQ,KAAK,CAAC,CAAC;GACxD,OAAO,aAAa,MAAM,MAAM;EAClC,UAAU;GACR,UAAU,IAAI;EAChB;CACF,SAAS,OAAO;EACd,IAAI,aAAa,KAAK,GAAG,OAAO,EAAE,OAAO,UAAU;EACnD,MAAM;CACR;CAGA,IAAI,KAAK,KAAK,CAAC,CAAC,WAAW,GAAG,OAAO,EAAE,OAAO,QAAQ;CACtD,IAAI;CACJ,IAAI;EACF,SAAS,KAAK,MAAM,IAAI;CAC1B,SAAS,OAAO;EACd,MAAM,IAAI,MAAM,qBAAqB,KAAK,kDAAkD,EAC1F,MACF,CAAC;CACH;CACA,MAAM,SAAS;CACf,IACE,OAAO,WAAW,YAClB,WAAW,QACX,OAAO,OAAO,QAAQ,YACtB,CAAC,OAAO,UAAU,OAAO,GAAG,KAC5B,OAAO,OAAO,KACd,OAAO,OAAO,cAAc,YAC5B,OAAO,OAAO,UAAU,YACvB,OAAO,iBAAiB,KAAA,KAAa,OAAO,OAAO,iBAAiB,YACpE,OAAO,eAAe,KAAA,MACpB,CAAC,OAAO,cAAc,OAAO,UAAU,KAAK,OAAO,aAAa,IAEnE,MAAM,IAAI,MAAM,qBAAqB,KAAK,gDAAgD;CAE5F,MAAM,EAAE,KAAK,WAAW,OAAO,iBAAiB;CAEhD,MAAM,gBAAgB,sBAAsB,MAAM;CAClD,MAAM,EAAE,KAAK,MAAM,GAAG,aAAa,iBAAiB,EAAE,IAAI;CAC1D,OAAO;EACL,OAAO;EACP,QAAQ,OAAO,OAAO;GACpB;GACA;GACA;GACA,GAAI,OAAO,eAAe,KAAA,IAAY,CAAC,IAAI,EAAE,YAAY,OAAO,WAAW;GAC3E,GAAI,iBAAiB,KAAA,IAAY,CAAC,IAAI,EAAE,aAAa;GACrD,GAAG;EACL,CAAC;EACD,QAAQ;EACR;CACF;AACF;;AAGA,SAAS,aAAa,UAAgE;CACpF,OAAO,kBAAkB,SAAS,QAAQ,SAAS,OAAO,CAAC,CAAC,aAAa;AAC3E;;AAGA,eAAe,cAAc,MAAc,QAA+C;CACxF,MAAM,WAAW,YAAY,IAAI,IAAI;CACrC,OAAO,WAAW,GAAG,KAAK,OAAO,KAAK,YAAY,IAAI,IAAI,UAAU,MAAMA,WAAM,EAAE;CAClF,eAAe,YAAY;EACzB,MAAM,WAAW,aAAa,IAAI;EAClC,IAAI,SAAS,UAAU,UAAU;EACjC,IACE,SAAS,OAAO,QAAQ,OAAO,OAC/B,SAAS,OAAO,cAAc,OAAO,aACrC,SAAS,OAAO,UAAU,OAAO,SACjC,SAAS,OAAO,iBAAiB,OAAO,gBACxC,SAAS,OAAO,eAAe,OAAO,cACtC,SAAS,OAAO,MAAM,QAAQ,OAAO,MAAM,OAC3C,SAAS,OAAO,MAAM,QAAQ,OAAO,MAAM,OAC3C,SAAS,OAAO,MAAM,gBAAgB,OAAO,MAAM,aAEnD;EACF,gBAAgB,IAAI;CACtB,CAAC;AACH;AAEA,SAAS,gBAAgB,MAAoB;CAC3C,IAAI;EACF,WAAW,IAAI;CACjB,SAAS,OAAO;EACd,IAAI,CAAC,aAAa,KAAK,GAAG,MAAM;CAClC;AACF;;;;;;;AC/QA,eAAsB,iBACpB,QACA,UAAmC,CAAC,GACH;CACjC,MAAM,EAAE,OAAO,cAAc;CAC7B,IAAI,cAAc,KAAA,MAAc,CAAC,OAAO,cAAc,SAAS,KAAK,YAAY,IAC9E,MAAM,IAAI,WAAW,6DAA6D;CAEpF,MAAM,OAAO,KAAK,QAAQ,qBAAqB;CAC/C,IAAI;CACJ,IAAI;EACF,SAAS,MAAM,KAAK,MAAM,GAAG;CAC/B,SAAS,OAAO;EACd,IAAI,aAAa,KAAK,GACpB,OAAO;GAAE,SAAS,CAAC;GAAG,OAAO,UAAU,KAAA;GAAW,WAAW;GAAO,gBAAgB;EAAE;EAExF,MAAM;CACR;CACA,IAAI;EACF,MAAM,WAAW,MAAM,OAAO,KAAK,EAAE,QAAQ,KAAK,CAAC;EACnD,IAAI,CAAC,SAAS,OAAO,GAAG,MAAM,IAAI,MAAM,GAAG,KAAK,0BAA0B;EAC1E,MAAM,OAAO,OAAO,SAAS,IAAI;EACjC,MAAM,OAAO,SAAS,QAAQ;EAC9B,MAAM,UACJ,UAAU,KAAA,KACV,MAAM,SAAS,QACf,OAAO,cAAc,MAAM,MAAM,KACjC,MAAM,UAAU,KAChB,MAAM,UAAU,QAChB,MAAM,aAAc,MAAM,SAAS,QAAQ,MAAM,MAAM;EACzD,IAAI,SAAS,UAAU,MAAM,SAAS;EACtC,MAAM,UAAoC,CAAC;EAC3C,MAAM,OAAO,OAAO,OAAe,KAAa,YAAY,UAAyB;GACnF,SAAS;GACT,WAAW,MAAM,UAAU,uBAAgC,MAAM;IAC/D;IACA;IACA;IACA,YAAY;IACZ,WAAW,cAAc;KACvB,SAAS;IACX;GACF,CAAC,GAAG;IACF,IAAI,CAAC,SAAS,MAAM,KAAK,OAAO,OAAO,SAAS,UAC9C,MAAM,IAAI,MAAM,GAAG,KAAK,mCAAmC;IAE7D,IAAI,OAAO,SAAS,SAAS;KAC3B,IAAI,OAAO,OAAO,OAAO,UAAU,MAAM,IAAI,MAAM,GAAG,KAAK,yBAAyB;KACpF,QAAQ,KAAK;MAAE,MAAM;MAAS,MAAM,OAAO;MAAM,IAAI,OAAO;KAAG,CAAC;IAClE,OACE,KAAK,MAAM,SAAS,yBAAyB,MAAM,GAAG;KACpD,IACE,CAAC,SAAS,KAAK,KACf,OAAO,MAAM,SAAS,YACtB,OAAO,MAAM,OAAO,UAEpB,MAAM,IAAI,MAAM,GAAG,KAAK,6CAA6C;KAEvE,QAAQ,KAAK;MAAE,MAAM;MAAS,MAAM,OAAO;MAAM;KAAM,CAAC;IAC1D;IAEF,IAAI,WAAW;GACjB;EACF;EACA,IAAI,YAAY;EAChB,IAAI,CAAC,WAAW,cAAc,KAAA,KAAa,OAAO,WAAW;GAC3D,MAAM,KAAK,GAAG,MAAM,IAAI;GACxB,MAAM,aAAa;GACnB,MAAM,YAAY,MAAM,aAAa,QAAQ,OAAO,WAAW,MAAM,EAAE;GACvE,YAAY,YAAY;GACxB,MAAM,KAAK,KAAK,IAAI,YAAY,SAAS,GAAG,IAAI;GAEhD,IAAI,WAAW,aAAa,YAAY,YAAY;IAClD,MAAM,WAAW,MAAM,aAAa,QAAQ,YAAY,GAAG,MAAM,EAAE;IACnE,YAAY,WAAW;IACvB,MAAM,KAAK,KAAK,IAAI,YAAY,QAAQ,GAAG,SAAS;GACtD;EACF,OAAO;GACL,MAAM,MACJ,WAAW,cAAc,KAAA,KAAa,OAAO,SAAS,YAClD,MAAM,aAAa,QAAQ,SAAS,WAAW,MAAM,CAAC,IACtD;GACN,MAAM,KAAK,QAAQ,GAAG;EACxB;EACA,IAAI,SAAS,MAAM,KAAK,MAAM,EAAE,QAAQ,KAAK,CAAC,CAAC,MAAM,SAAS,MAAM,OAAO,KAAK,EAAA,CAAG,OAAO,MACxF,MAAM,IAAI,MAAM,GAAG,KAAK,qDAAqD;EAC/E,OAAO;GACL;GACA,QAAQ;IAAE;IAAM;IAAQ,UAAU,MAAM,SAAS,QAAQ,MAAM;GAAE;GACjE,OAAO,UAAU,KAAA,KAAa,CAAC;GAC/B;GACA,gBAAgB,OAAO;EACzB;CACF,UAAU;EACR,MAAM,OAAO,MAAM;CACrB;AACF;AAEA,SAAS,SAAS,MAA2B;CAC3C,OAAO,GAAG,KAAK,IAAI,GAAG,KAAK,IAAI,GAAG,KAAK;AACzC;AAEA,eAAe,MAAM,QAAoB,OAAe,QAAiC;CACvF,MAAM,SAAS,OAAO,MAAM,MAAM;CAClC,MAAM,EAAE,cAAc,MAAM,OAAO,KAAK,QAAQ,GAAG,QAAQ,KAAK;CAChE,IAAI,cAAc,QAAQ,MAAM,IAAI,MAAM,kDAAkD;CAC5F,OAAO;AACT;AAEA,eAAe,SAAS,QAAoB,QAAiC;CAC3E,MAAM,SAAS,KAAK,IAAI,QAAQ,GAAG;CACnC,OAAO,WAAW,QAAQ,CAAC,CACxB,OAAO,MAAM,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CACtC,OAAO,MAAM,MAAM,QAAQ,SAAS,QAAQ,MAAM,CAAC,CAAC,CACpD,OAAO,KAAK;AACjB;;AAGA,eAAe,aACb,QACA,UACA,MACA,WACiB;CACjB,OAAO,WAAW,KAAK,WAAW,MAAM;EACtC,MAAM,QAAQ,cAAc,KAAK,KAAK,IAAI,GAAG,WAAW,KAAM,IAAI;EAClE,MAAM,MAAM,cAAc,KAAK,WAAW,KAAK,IAAI,MAAM,WAAW,KAAM;EAC1E,MAAM,OAAO,MAAM,MAAM,QAAQ,OAAO,MAAM,KAAK;EACnD,MAAM,UAAU,cAAc,KAAK,KAAK,YAAY,EAAE,IAAI,KAAK,QAAQ,EAAE;EACzE,IAAI,YAAY,IAAI,OAAO,QAAQ,UAAU;EAC7C,WAAW,cAAc,KAAK,QAAQ;CACxC;CACA,OAAO;AACT;;;;;;;ACvJA,eAAsB,aAAa,QAA+C;CAChF,MAAM,CAAC,QAAQ,SAAS,SAAS,QAAQ,WAAW,MAAM,QAAQ,IAAI;EACpE,iBAAiB,MAAM;EACvB,kBAAkB,MAAM;EACxB,eAAe,MAAM;EACrB,yBAAyB,MAAM;EAC/B,iBAAiB,QAAQ,EAAE,WAAW,MAAO,CAAC;CAChD,CAAC;CACD,MAAM,gBAAgB,qBAAqB,MAAM;CACjD,IACE,CAAC,UACD,CAAC,WACD,CAAC,WACD,CAAC,OAAO,UACR,CAAC,iBACD,QAAQ,QAAQ,WAAW,GAE3B;CAEF,MAAM,aAAa,OAAO,UAAU,KAAA,IAAY,OAAO;CACvD,MAAM,QAAQ,SACV,YACA,gBACE,eACA,UACE,WACA,eAAe,OACb,YACA,eAAe,QACb,SACA,KAAA;CACZ,MAAM,OAAO,QAAQ,KAAK,OAAO,MAAM,SAAS,KAAK,OAAO,OAAO,KAAK,IAAI;CAC5E,MAAM,eACH,QAAQ,SAAS,eAAe,OAAO,WAAW,kBAC/C,OAAO,OAAO,SAAS,OACvB,KAAA,MAAc,MAAM,SAAS;CACnC,IAAI;CACJ,MAAM,WAAW,OAA0C;EACzD,MAAM,YAAY,OAAO,KAAA,IAAY,KAAA,IAAY,IAAI,KAAK,EAAE,CAAC,CAAC,QAAQ;EACtE,IAAI,cAAc,KAAA,KAAa,OAAO,SAAS,SAAS,GACtD,SAAS,WAAW,KAAA,IAAY,YAAY,KAAK,IAAI,QAAQ,SAAS;CAE1E;CACA,QAAQ,SAAS,EAAE;CACnB,QAAQ,SAAS,KAAK;CACtB,QAAQ,eAAe,EAAE;CACzB,QAAQ,OAAO,QAAQ,SAAS;CAChC,KAAK,MAAM,UAAU,QAAQ,SAC3B,QAAQ,OAAO,SAAS,UAAU,OAAO,KAAK,OAAO,MAAM,EAAE;CAC/D,KAAK,MAAM,QAAQ,QAAQ,KAAK,SAAS,CAAC,GAAG;EAC3C,QAAQ,KAAK,SAAS;EACtB,QAAQ,KAAK,SAAS;CACxB;CACA,MAAM,iBAAiB,WAAW,KAAA,IAAY,KAAA,IAAY,IAAI,KAAK,MAAM,CAAC,CAAC,YAAY;CACvF,OAAO;EACL,GAAI,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,MAAM;EACvC,GAAI,gBAAgB,KAAA,IAAY,CAAC,IAAI,EAAE,YAAY;EACnD,GAAI,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO;EACzC,GAAI,kBAAkB,KAAA,IAAY,CAAC,IAAI,EAAE,cAAc;EACvD,GAAI,eAAe,KAAA,IAAY,CAAC,IAAI,EAAE,WAAW;EACjD,GAAI,mBAAmB,KAAA,IAAY,CAAC,IAAI,EAAE,eAAe;CAC3D;AACF"}

package/dist/{runtime-BmxmsaNz.js → runtime-9EYvBcHG.js}

@@ -1,21 +1,22 @@
-import { $t as insideCursorNamespace, D as isTraceAnalysisStore, Hr as executableAgentProfileSnapshot, Ui as createSandboxTurnEventCollector, Ur as executableAgentSpecSnapshot, Yr as runtimeFailureCauseSchema, Z as settledToIteration, da as runAbortable, nt as rollingDispatch, q as coordinationProfileToolPrefix, qi as notifySandboxEventObserver, yi as contentAddress } from "./scope-CJ7xtrs8.js";
+import { A as isTraceAnalysisStore, Br as executableAgentProfileSnapshot, G as settledToIteration, Mt as coordinationProfileToolPrefix, Ui as createSandboxTurnEventCollector, Vr as executableAgentSpecSnapshot, X as rollingDispatch, _i as contentAddress, qi as notifySandboxEventObserver, qr as runtimeFailureCauseSchema, rn as insideCursorNamespace, ua as runAbortable } from "./scope-DzhBJrRN.js";
 import { i as ConfigError, m as ValidationError, n as AnalystError, s as PlannerError } from "./errors-AzSuGI23.js";
-import { D as runAgentic, E as refine, M as renderReport, N as profileChatClient, O as sample, j as observe, k as ObservationError, v as loadAuthoredStrategy, x as strategyAuthorContract, y as requestStrategySource } from "./structural-rollout-Bl23HSOd.js";
-import { $ as isAsyncIterable, A as markPutStreamVerified, C as captureMaterializedWorkspace, G as chargedTokens, K as cloneSpend, L as immutableCandidateValue, N as canonicalCandidateDigest$1, Q as isAbortError, St as armDeadlineTimer, U as addSpend, X as fnv1a32Hex, Y as errorMessage, Z as hasCompleteCacheBreakdown, at as sleep, b as WorkspaceScanLimitError, dt as zeroSpend, et as mapWithConcurrency, nt as randomSuffix, ot as stringifySafe, z as sha256Bytes$1 } from "./workspace-streams-8ALHaZzx.js";
-import { a as readCommittedJsonLines, c as appendCommittedJsonLine, d as detachedSnapshot, i as readCommittedJsonFile, o as upsertCommittedJsonLine, s as withJsonlFileLock, t as isNoEntError, u as detachedFrozen } from "./jsonl-file-CvPuwM0a.js";
-import { C as createExecutor, D as runAgentRounds, O as assertBoxlessPromptOptions, P as defaultSelectWinner, V as routerBrain, _ as withDriverExecutor, _t as CheckUnavailableError, b as createExecutorRegistry, bt as mapExecutorResult, j as createSandboxLineage, k as readPromptOptions, n as createSupervisor, q as createWorktreeCliExecutor, v as InMemoryResultBlobStore, xt as verdictFromJudgeScore, y as InMemorySpawnJournal, yt as gateOnDeliverable } from "./supervisor-CwANBb9-.js";
+import { D as runAgentic, E as refine, M as renderReport, N as profileChatClient, O as sample, j as observe, k as ObservationError, v as loadAuthoredStrategy, x as strategyAuthorContract, y as requestStrategySource } from "./structural-rollout-DgvJLTO0.js";
+import { $ as mapWithConcurrency, G as cloneSpend, H as addSpend, I as immutableCandidateValue, J as errorMessage, M as canonicalCandidateDigest$1, Q as isAsyncIterable, R as sha256Bytes$1, S as captureMaterializedWorkspace, St as armDeadlineTimer, W as chargedTokens, X as hasCompleteCacheBreakdown, Y as fnv1a32Hex, Z as isAbortError, at as stringifySafe, dt as zeroSpend, it as sleep, k as markPutStreamVerified, tt as randomSuffix, y as WorkspaceScanLimitError } from "./workspace-streams-BqNM06y4.js";
+import { a as readCommittedJsonLines, c as appendCommittedJsonLine, d as detachedSnapshot, i as readCommittedJsonFile, o as upsertCommittedJsonLine, s as withJsonlFileLock, t as isNoEntError, u as detachedFrozen } from "./jsonl-file-CeVYTIQJ.js";
+import { C as createExecutor, D as runAgentRounds, O as assertBoxlessPromptOptions, P as defaultSelectWinner, V as routerBrain, _ as withDriverExecutor, _t as CheckUnavailableError, b as createExecutorRegistry, bt as mapExecutorResult, j as createSandboxLineage, k as readPromptOptions, n as createSupervisor, q as createWorktreeCliExecutor, v as InMemoryResultBlobStore, xt as verdictFromJudgeScore, y as InMemorySpawnJournal, yt as gateOnDeliverable } from "./supervisor-B6sl14OR.js";
 import { a as concreteProfileModel, c as profileModelExecutionSettings, i as concreteModelId, l as profileProviderModel, o as enforceTokenLimits, p as canonicalObservedModelParts, t as assertExecutableAgentProfile, v as harnessRunsAgent } from "./model-policy-JOcg3NRs.js";
 import { a as writeAtomicDurableFile } from "./durable-file-DstVeHcj.js";
 import { i as notifyRuntimeHookEvent } from "./runtime-hooks-CsW2pfFk.js";
-import { a as reconcileInterruptedSearchCalls, c as searchExecutor, r as dedicatedLane, x as runtimeShipDecision } from "./search-executor-DSB6XAl1.js";
-import { y as foldCoordinationRecords } from "./run-cancellation-CGgk54Md.js";
-import { a as downMessageRefusalReasons, p as createInMemoryRunContext } from "./coordination-manager-C-ZoeZ73.js";
-import { E as validateFlowGraph, I as kernelPromptRegistry, _ as coordinationControlToolNames, k as validateGraphTopology, t as supervise, y as runBrainLoop } from "./supervise-MAzd0hOk.js";
-import { _ as compileGraphParameters, a as graphRegistry, b as graphRouteWhenSchema, d as recordGraphRun, g as bindGraphParameters, h as assertGraphTriggerBindings, i as graphFromStored, l as lookupGraph, m as taskShapeDigest, o as graphRunsFor, r as graphDigest, t as digestOfGraph, v as graphTriggerBindingsSchema, y as graphFileSchema } from "./graph-registry-CI1o16DH.js";
+import { a as reconcileInterruptedSearchCalls, c as searchExecutor, r as dedicatedLane, x as runtimeShipDecision } from "./search-executor-BJRNavck.js";
+import { y as foldCoordinationRecords } from "./run-cancellation-BCuu6khW.js";
+import { a as downMessageRefusalReasons, p as createInMemoryRunContext } from "./coordination-manager-RSJg5GmY.js";
+import { M as kernelPromptRegistry, S as validateFlowGraph, T as validateGraphTopology, h as runBrainLoop, p as coordinationControlToolNames, t as supervise } from "./supervise-Cqhkb2Oj.js";
+import { _ as compileGraphParameters, a as graphRegistry, b as graphRouteWhenSchema, d as recordGraphRun, g as bindGraphParameters, h as assertGraphTriggerBindings, i as graphFromStored, l as lookupGraph, m as taskShapeDigest, o as graphRunsFor, r as graphDigest, t as digestOfGraph, v as graphTriggerBindingsSchema, y as graphFileSchema } from "./graph-registry-B25FxBZN.js";
+import "./run-state-ByHiAjUs.js";
 import { i as redactProtectedValue, r as redactProtectedReason } from "./protected-redaction-DilFZch5.js";
-import "./provision-supervisor-Cjs4SQ9Q.js";
-import "./delegate-d9HcOFC5.js";
-import "./graph-C_Z0Ua10.js";
+import "./provision-supervisor-CtAaJCUa.js";
+import "./delegate-C0cprMUN.js";
+import "./graph-cEg-gquv.js";
 import { agentProfileSchema, canonicalAgentProfileDigest, canonicalCandidateDigest, sha256Bytes, validateAgentProfileSecurity } from "@tangle-network/agent-interface";
 import { CODING_HARNESSES, DEFAULT_TRACE_ANALYST_KINDS, InMemoryTraceStore, OUTPUT_VALUE, benjaminiHochberg, buildTrajectory, computeFindingId as computeFindingId$1, confidenceInterval, createTraceAnalyst, expandProfileAxes, makeFinding as makeFinding$1, pairedBootstrap, paretoFrontier, wilcoxonSignedRank, wilson } from "@tangle-network/agent-eval";
 import { createAgentRunOutcomeTracker } from "@tangle-network/sandbox/runtime";
@@ -4322,8 +4323,8 @@ function resolveShapeBudget(root, over) {
 				...resource,
 				limit: Math.floor(resource.limit / fanout)
 			}])) },
-			maxIterations: Math.max(1, Math.floor(root.maxIterations / fanout)),
-			maxTokens: Math.max(1, Math.floor(root.maxTokens / fanout)),
+			...root.maxIterations === void 0 ? {} : { maxIterations: Math.max(0, Math.floor(root.maxIterations / fanout)) },
+			...root.maxTokens === void 0 ? {} : { maxTokens: Math.max(0, Math.floor(root.maxTokens / fanout)) },
 			...root.maxUsd !== void 0 ? { maxUsd: root.maxUsd / fanout } : {},
 			...root.deadlineMs !== void 0 ? { deadlineMs: root.deadlineMs } : {}
 		},
@@ -7367,7 +7368,7 @@ function graphDesignerExtraTools(env) {
 			})();
 			if (name === "designer_history") return (async () => {
 				const args = asRecord(raw ?? {}, "designer_history");
-				const { listGraphRuns } = await import("./graph-registry-BU7pcrUW.js");
+				const { listGraphRuns } = await import("./graph-registry-C-hjRx2t.js");
 				const all = await listGraphRuns(registry);
 				return { runs: (args.taskShape === void 0 ? all : all.filter((row) => row.taskDigest === taskShapeDigest(asRecord(args.taskShape, "designer_history.taskShape")))).map(summarize) };
 			})();
@@ -7378,7 +7379,7 @@ function graphDesignerExtraTools(env) {
 				if (mode === "replay") {
 					const digest = args.graphDigest;
 					if (typeof digest !== "string" || digest.length === 0) throw new ValidationError("designer_run_graph: replay mode requires graphDigest from lookup");
-					const { loadGraph } = await import("./graph-registry-BU7pcrUW.js");
+					const { loadGraph } = await import("./graph-registry-C-hjRx2t.js");
 					const stored = await loadGraph(registry, digest);
 					if (!stored) throw new ValidationError(`designer_run_graph: no stored graph ${digest.slice(0, 12)} — re-lookup`);
 					const graph = env.bindCheck(graphFromStored(stored, () => {
@@ -10095,4 +10096,4 @@ function tail(s) {
 }
 export { runBenchmark as $, renderLeaderboardHtml as $t, searchPresets as A, sanitizeMcpToolSchema as At, graphFromSessionFacts as B, assertDeclaredCheck as Bt, withUntrackedArtifacts as C, harvestCorpus as Ct, SEARCH_SPEC_CORRELATION_KEY as D, connectStdioMcp as Dt, createFencedSqlRunContext as E, McpSpawnFault as Et, loadProfile as F, secretEnvOfMcpServer as Ft, chatWorkerSeam as G, readDeclaredCheck as Gt, loadGraphFile as H, declaredCheckDeliverable as Ht, pickBestProfile as I, inlineSandboxClient as It, strategyTournament as J, deterministicCompletion as Jt, createChatSessionStore as K, runIsolatedCheck as Kt, profileRegistry as L, loopCampaignDispatch as Lt, connectRemoteSupervisor as M, mcpSecretEnvMetadataKey as Mt, connectRemoteSupervisorControl as N, resolveMcpServerLaunch as Nt, assertSearchSpec as O, materializeLocalMcp as Ot, bestProfileFor as P, resolveSecretEnv as Pt, printBenchmarkReport as Q, pairwiseSignificance as Qt, profileRunsForName as R, loopDispatch as Rt, copyUntrackedIntoClone as S, HarvestError as St, validateStoredGraph as T, resolveSandboxClient as Tt, graphDesignerExtraTools as U, declaredCheckDigest as Ut, GraphFileResolutionError as V, checkProgramDigest as Vt, chatTransportExecutor as W, declaredCheckJudge as Wt, openSandboxRun as X, stopSentinel as Xt, SandboxRunAbortError as Y, sentinelCompletion as Yt, createS3PrivateCasStore as Z, leaderboard as Zt, NOTE_MAX_CHARS as _, buildSteerContext as _t, localShell as a, FileCorpus as at, composeWorkerEvidence as b, observationFromRegistry as bt, createVerifierEnvironment as c, fanout as ct, harvestSurfaceDiffs as d, panel as dt, renderLeaderboardMarkdown as en, createPrivateCasArtifactPort as et, analystsFromRegistry as f, pipeline as ft, EVIDENCE_MAX_CHARS as g, assertTraceDerivedFindings as gt, runCoderChecks as h, widen as ht, jjWorkspace as i, openSqlRunStore as in, runPersonified as it, searchSpecDigest as j, envKeyProvider as jt, compileSearchSpec as k, createMcpEnvironment as kt, boxSurfaceReader as l, flatWidenGate as lt, worktreeFanout as m, verify as mt, makeFinding$1 as n, renderPairwiseMarkdown as nn, trajectoryReport as nt, runInWorkspace as o, InMemoryCorpus as ot, failuresAnalyst as p, selectValidWinner as pt, runStrategyEvolution as q, completionAuthorizes as qt, gitWorkspace as r, SqlRunOwnershipError as rn, definePersona as rt, createWaterfallCollector as s, renderCorpusToInstructions as st, computeFindingId$1 as t, renderLeaderboardSvg as tn, equalKOnCost as tt, fsSurfaceReader as u, loopUntil as ut, VERIFY_TAIL_CHARS as v, createScopeAnalyst as vt, analyzeTrace as w, defineLeaderboard as wt, settledWorkerOut as x, inProcessSandboxClient as xt, closingWorkerNote as y, registryScopeAnalyst as yt, recordProfileRun as z, superviseDispatch as zt };
 
-//# sourceMappingURL=runtime-BmxmsaNz.js.map
+//# sourceMappingURL=runtime-9EYvBcHG.js.map