@tangle-network/agent-runtime 5.0.0 → 6.0.1

package/dist/{supervise-rYEsVVcn.js → supervise-Cqhkb2Oj.js}

@@ -1,16 +1,16 @@
-import { An as WORKER_TRACE_PROPAGATION, Ar as recordRuntimeOwnedDriveHarnessProviderEvidence, At as beginScopeRetainedOwnerDrive, B as beginScopeOwnerAttempt, Bn as createOtelExporter, Ci as executorFailure, Dt as prepareScopeRetainedOwnerTask, Et as consumeScopeRetainedOwnerResult, Fi as assertValidBudget, Fr as runtimeOwnedDriveHarnessProviderEvidence, Ft as scopeRetainedOwnerRestorePoint, G as scopeOwnerExecutorNodeContext, H as noteScopeOwnerPlannedExecution, Hn as generateSpanId, Ht as scopeRetainedOwnerContext, Ir as runtimeOwnedExecutorExecutionBinding, It as noteScopeRetainedOwnerCoordination, J as providerVisibleProfile, Jr as runtimeFlowBrain, K as coordinationMcpAlias, Kr as isRuntimeFlowBrain, Lr as runtimeOwnedExecutorMaterialization, Mi as newUsageTotals, Mt as scopeRetainedOwnerTurnEnded, Nt as assertRetainedOwnerCoordinationRekey, O as parseWorkerToolTraceArtifact, Ot as scopeRetainedOwnerPriorSpend, Pi as spendFromUsageTotals, Pt as reconcileScopeRetainedOwnerEnvironment, Q as assertRecursiveReservationPolicy, Rr as runtimeOwnedExecutorProviderEvidence, Rt as bindScopeRetainedOwnerEnvironmentId, Sr as authoredAgentIdentity, St as scopeRetainedOwnerResourceReader, Tt as abandonScopeRetainedOwnerInvocation, U as recordScopeOwnerMaterialization, Ut as scopeRetainedOwnerJournalRoot, Vr as runtimeOwnedScopeOwnerRuntime, W as restoreScopeOwnerAcceptedExecution, Y as runtimeGraphMetadataKey, _i as unavailableResumeAt, a as readRootStream, bt as prepareScopeRetainedOwnerSeatSwitch, ct as recordScopeOwnerBarrenPause, dr as isTerminalNodeStatus, er as persistHarnessTranscript, fa as RunCancellationReason, fi as cappedDoublingMs, fr as SEAT_RECHECK_MS, gi as unavailablePauseMs, gr as seatExecutionProfile, ha as runAbortable, hi as reportedResetAt, hr as authoredSeatStages, ia as recordValue, ji as meterUsageEvent, kr as providerAttemptEvidence, kt as scopeRetainedOwnerResult, li as retainedExecutorSeamKey, lt as recordScopeOwnerDriverAttempt, ma as linkAbort, mr as SeatPauseError, n as ROOT_STREAM_FILE, ot as meterRuntimeOwnedAccounting, pi as jitteredMs, pr as SeatChain, q as coordinationProfileToolPrefix, qr as runtimeFlowAgent, r as createRootStreamSink, ri as RetainedExecutionPendingError, si as registerRetainedExecutorPreparation, sr as createActivityLog, st as meterRuntimeOwnedProviderAttempt, tr as readHarnessTranscript, ur as isLiveNodeStatus, ut as recordScopeOwnerPause, xi as contentAddress, xr as attestRuntimeOwnedScopeOwner, xt as releaseScopeRetainedOwnerForSeatPause, zr as runtimeOwnedPendingExecutorMaterialization, zt as bindScopeRetainedOwnerProvider } from "./scope-JcCkUy_z.js";
+import { $r as RetainedExecutionPendingError, Ai as spendFromUsageTotals, At as scopeOwnerExecutorNodeContext, Bt as scopeRetainedOwnerRestorePoint, Ct as scopeRetainedOwnerResult, Di as meterUsageEvent, Dt as recordScopeOwnerMaterialization, En as WORKER_TRACE_PROPAGATION, Er as recordRuntimeOwnedDriveHarnessProviderEvidence, Et as noteScopeOwnerPlannedExecution, Fr as runtimeOwnedPendingExecutorMaterialization, Ft as beginScopeRetainedOwnerDrive, Gt as scopeRetainedOwnerContext, Hr as isRuntimeFlowBrain, In as createOtelExporter, K as assertRecursiveReservationPolicy, Kt as scopeRetainedOwnerJournalRoot, Lr as runtimeOwnedScopeOwnerRuntime, Lt as scopeRetainedOwnerTurnEnded, Mr as runtimeOwnedExecutorExecutionBinding, Mt as coordinationProfileToolPrefix, Nr as runtimeOwnedExecutorMaterialization, Nt as providerVisibleProfile, Oi as newUsageTotals, Ot as restoreScopeOwnerAcceptedExecution, Pr as runtimeOwnedExecutorProviderEvidence, Pt as runtimeGraphMetadataKey, Rn as generateSpanId, Rt as assertRetainedOwnerCoordinationRekey, Si as turnFailurePolicy, St as scopeRetainedOwnerPriorSpend, Tr as providerAttemptEvidence, Ur as runtimeFlowAgent, Ut as bindScopeRetainedOwnerEnvironmentId, Vt as noteScopeRetainedOwnerCoordination, Wr as runtimeFlowBrain, Wt as bindScopeRetainedOwnerProvider, Xn as persistHarnessTranscript, Zn as readHarnessTranscript, _i as contentAddress, _r as attestRuntimeOwnedScopeOwner, a as readRootStream, ai as retainedExecutorSeamKey, an as executorObservationSeamKey, at as recordScopeOwnerPause, bt as consumeScopeRetainedOwnerResult, ci as cappedDoublingMs, cr as SEAT_RECHECK_MS, di as reportedResetAt, dr as authoredSeatStages, ea as recordValue, et as meterRuntimeOwnedAccounting, fi as unavailablePauseMs, fr as seatExecutionProfile, gt as scopeRetainedOwnerResourceReader, ht as releaseScopeRetainedOwnerForSeatPause, it as recordScopeOwnerDriverAttempt, j as parseWorkerToolTraceArtifact, ji as assertValidBudget, jr as runtimeOwnedDriveHarnessProviderEvidence, jt as coordinationMcpAlias, kt as scopeOwnerExecutionObservation, la as linkAbort, li as jitteredMs, lr as SeatChain, mt as prepareScopeRetainedOwnerSeatSwitch, n as ROOT_STREAM_FILE, nt as pauseScopeSeatAdmission, or as isLiveNodeStatus, pi as unavailableResumeAt, r as createRootStreamSink, ri as registerRetainedExecutorPreparation, rr as createActivityLog, rt as recordScopeOwnerBarrenPause, sa as RunCancellationReason, sr as isTerminalNodeStatus, tt as meterRuntimeOwnedProviderAttempt, ua as runAbortable, ur as SeatPauseError, vr as authoredAgentIdentity, wt as beginScopeOwnerAttempt, xi as turnFailureOf, xt as prepareScopeRetainedOwnerTask, yi as executorFailure, yt as abandonScopeRetainedOwnerInvocation, zt as reconcileScopeRetainedOwnerEnvironment } from "./scope-DzhBJrRN.js";
 import { f as RuntimeRunStateError, i as ConfigError, m as ValidationError } from "./errors-AzSuGI23.js";
-import { $ as isAsyncIterable, Dt as teardownExecutor, G as chargedTokens, St as armDeadlineTimer, Tt as isDeadlineAbortReason, U as addSpend, Y as errorMessage, at as sleep, bt as DEFAULT_SUCCESSFUL_SHUTDOWN_MS, dt as zeroSpend, gt as withBudgetResources, ht as resourceTelemetry, lt as unmeteredSpend, pt as addResourceSpend, tt as promptCacheTokenClasses, ut as withTimeout } from "./workspace-streams-8ALHaZzx.js";
-import { _ as errorText, d as detachedSnapshot, h as errorHttpStatus, m as errMessage, p as causeChain } from "./jsonl-file-CeVYTIQJ.js";
-import { $t as promptModelProfileMaterialization, At as bridgeModelRouteRefusal, B as createRouterTranscript, C as createExecutor, Ct as admitContinuationPolicy, Et as createContinuationKeeper, F as codeModeArguments, I as codeModeModelOutput, Jt as controlProfileMaterialization, Kt as assertProfileMaterialization, L as createCodeModeTools, Qt as promptControlProfileMaterialization, Rt as bridgeRuntimeAttachmentsKey, S as captureReusableExecutorConfig, St as CONTINUATIONS_DIR, Tt as checkVerdictOf, U as resolveAgentEnvironmentProvider, V as routerBrain, X as createInbox, Xt as fullProfileMaterialization, Y as INBOX_RECEIPT_KEY, Yt as defineProfileMaterializationContract, Zt as profileMaterializationAxes$1, _t as CheckUnavailableError, a as assertRunParking, c as sleepScopeWait, ct as HarnessTurnFailedError, d as runFinalizer, dt as isContentFilterRefusal, en as renderUnsupported, et as PEER_MAIL_WIRE_KEY, f as runTree, ft as summarizeDriverAttempts, g as isDriverSpec, gt as preflightPublicCoordination, h as driverExecutorFactory, ht as upstreamUnavailableSignal, i as RunParkedError, in as worktreeCliProfileMaterialization, kt as bridgeAdmissionRefusal, l as withRunParking, lt as abandonablePending, m as driverChild, mt as undispatchedCredentialExit, n as createSupervisor, nn as sandboxProfileMaterialization, o as bindScopeParkingDrain, p as createRootHandle, pt as transientFailureKind, rn as unsupportedProfileDimensions, rt as isPeerMailEnvelope, st as DriverAttemptsExhaustedError, u as bestDelivered, ut as classifyDriverFailure, vt as gateFactoryOnDeliverable, w as snapshotExecutorConfig, wt as bestComposite, x as bindReusableExecutorExecutionId, z as toolResultText, zt as bridgeStopSignalKey } from "./supervisor-B-bX69uL.js";
+import { Dt as teardownExecutor, H as addSpend, J as errorMessage, Q as isAsyncIterable, St as armDeadlineTimer, Tt as isDeadlineAbortReason, W as chargedTokens, bt as DEFAULT_SUCCESSFUL_SHUTDOWN_MS, ct as unmeteredSpend, dt as zeroSpend, et as promptCacheTokenClasses, gt as withBudgetResources, ht as resourceTelemetry, it as sleep, pt as addResourceSpend, ut as withTimeout } from "./workspace-streams-BqNM06y4.js";
+import { _ as errorText, d as detachedSnapshot, h as errorHttpStatus, m as errMessage, p as causeChain, v as defaultRedactor } from "./jsonl-file-CeVYTIQJ.js";
+import { $t as promptModelProfileMaterialization, At as bridgeModelRouteRefusal, B as createRouterTranscript, C as createExecutor, Ct as admitContinuationPolicy, Et as createContinuationKeeper, F as codeModeArguments, I as codeModeModelOutput, Jt as controlProfileMaterialization, Kt as assertProfileMaterialization, L as createCodeModeTools, Qt as promptControlProfileMaterialization, Rt as bridgeRuntimeAttachmentsKey, S as captureReusableExecutorConfig, St as CONTINUATIONS_DIR, Tt as checkVerdictOf, U as resolveAgentEnvironmentProvider, V as routerBrain, X as createInbox, Xt as fullProfileMaterialization, Y as INBOX_RECEIPT_KEY, Yt as defineProfileMaterializationContract, Zt as profileMaterializationAxes$1, _t as CheckUnavailableError, a as assertRunParking, c as sleepScopeWait, ct as HarnessTurnFailedError, d as runFinalizer, dt as isContentFilterRefusal, en as renderUnsupported, et as PEER_MAIL_WIRE_KEY, f as runTree, ft as summarizeDriverAttempts, g as isDriverSpec, gt as preflightPublicCoordination, h as driverExecutorFactory, ht as upstreamUnavailableSignal, i as RunParkedError, in as worktreeCliProfileMaterialization, kt as bridgeAdmissionRefusal, l as withRunParking, lt as abandonablePending, m as driverChild, mt as undispatchedCredentialExit, n as createSupervisor, nn as sandboxProfileMaterialization, o as bindScopeParkingDrain, p as createRootHandle, pt as transientFailureKind, rn as unsupportedProfileDimensions, rt as isPeerMailEnvelope, st as DriverAttemptsExhaustedError, u as bestDelivered, ut as classifyDriverFailure, vt as gateFactoryOnDeliverable, w as snapshotExecutorConfig, wt as bestComposite, x as bindReusableExecutorExecutionId, z as toolResultText, zt as bridgeStopSignalKey } from "./supervisor-B6sl14OR.js";
 import { _ as agentHarness, a as concreteProfileModel, c as profileModelExecutionSettings, l as profileProviderModel, n as assertModelAllowed, o as enforceTokenLimits, r as assertProfileModelsAllowed, s as profileBridgeWireModel, t as assertExecutableAgentProfile, v as harnessRunsAgent } from "./model-policy-JOcg3NRs.js";
 import { n as createStdioToolServer } from "./tool-server-CZWd_Opp.js";
 import { t as composeRuntimeHooks } from "./runtime-hooks-CsW2pfFk.js";
-import { _ as workerAssignmentNamespace, c as writeRunCancellation, d as coordinationEventId, f as externalExecutionId, g as supervisionRunNamespace, h as rootCoordinationOwner, i as readRunCancellation, l as canonicalExecution, m as freezeDetachedProfile, p as freezeDetached, r as readRunCancelRequest, s as watchRunCancellation, t as applyRunCancellation, u as childCoordinationOwner } from "./run-cancellation-D5R-7UQt.js";
-import { c as createSteerAcknowledger, d as coordinationVerbNames, f as createFileRunContext, l as budgetOverspendText, m as withRunContext, n as createCoordinationToolsForManager, p as createInMemoryRunContext, s as createCancelAcknowledger, t as createCoordinationTools, u as normalizeAnalyzeOnSettle } from "./coordination-manager-D74AZg7m.js";
+import { _ as workerAssignmentNamespace, c as writeRunCancellation, d as coordinationEventId, f as externalExecutionId, g as supervisionRunNamespace, h as rootCoordinationOwner, i as readRunCancellation, l as canonicalExecution, m as freezeDetachedProfile, p as freezeDetached, r as readRunCancelRequest, s as watchRunCancellation, t as applyRunCancellation, u as childCoordinationOwner } from "./run-cancellation-BCuu6khW.js";
+import { c as createSteerAcknowledger, d as coordinationVerbNames, f as createFileRunContext, l as budgetOverspendText, m as withRunContext, n as createCoordinationToolsForManager, p as createInMemoryRunContext, s as createCancelAcknowledger, t as createCoordinationTools, u as normalizeAnalyzeOnSettle } from "./coordination-manager-RSJg5GmY.js";
 import { o as safeJsonText } from "./coordination-map-routing-DVjW5Gx0.js";
 import { a as graphRegistry, c as loadGraph } from "./graph-registry-B25FxBZN.js";
-import { ATTR, agentIdentityAttributes } from "@tangle-network/agent-trace-contract";
+import { ATTR, LINK_KIND_ATTR, agentIdentityAttributes } from "@tangle-network/agent-trace-contract";
 import { ProxySecretScopeSchema, ProxySecretsSchema, agentProfileSchema, canonicalAgentProfileDigest, canonicalCandidateDigest, canonicalCandidateJson, mergeProxySecretBindings, validateAgentProfileSecurity } from "@tangle-network/agent-interface";
 import { toolSpansToTraceAnalysisStore } from "@tangle-network/agent-eval";
 import { isRecord } from "@tangle-network/agent-core";
@@ -275,30 +275,7 @@ function captureSuperviseOptions(opts, mode = "execution") {
 	});
 }
 // src/runtime/supervise/otel-spans.ts
-/**
-* Supervisor tree → OTLP spans. OPT-IN, off by default.
-*
-* WHY. A supervised tree is legible only by parsing this package's own spawn journal; a span
-* carrying `parent_span_id` IS a tree, so emitting spans makes the supervisor readable by the same
-* viewer as every other multi-agent shape, with no per-system reader.
-*
-* NOT the record of truth. The spawn journal remains the sole durable ledger for replay/resume and
-* cost; nothing here is read back, and a run whose export fails is unaffected.
-*
-* HOW. A pure `RuntimeHooks` observer over events `Scope` ALREADY emits — `agent.spawn` (node
-* opened), `agent.child` (node settled), `agent.turn` (driver turn metered). It adds no event,
-* mutates no journal, changes no result. `Scope` re-seeds the hooks into every nested scope
-* (`makeNestedScopeSeam`), so one observer sees the WHOLE recursion.
-*
-* SHAPE. One span per node, opened at spawn, closed at settle, parented to its parent node's
-* span; the run root is the trace. Driver inference rides as an `LLM` child span under the node
-* that metered it. Attributes reuse the stack's vocabulary (`openinference.span.kind`,
-* `agent.name`, `llm.token_count.*`, `llm.cost_usd`, `tangle.cost.usd`), consumed by
-* `@tangle-network/agent-eval`'s `src/trace/attribute-vocabulary.ts`.
-*
-* UNKNOWN IS NEVER ZERO. `tokensKnown === false` / `usdKnown === false` spans OMIT the token/cost
-* attribute and set `tangle.supervise.tokens_known` / `cost_known` to `false`.
-*/
+/** Best-effort supervisor spans; the spawn journal owns replay and accounting. */
 /** OTEL status codes (`UNSET` / `OK` / `ERROR`) — the numeric wire values `OtelSpan.status` carries. */
 const STATUS_UNSET = 0;
 const STATUS_OK = 1;
@@ -315,6 +292,7 @@ function otelSpan(traceId, spec) {
 		startTimeUnixNano: msToUnixNano(spec.startMs),
 		endTimeUnixNano: msToUnixNano(Math.max(spec.startMs, spec.endMs)),
 		attributes: toOtlpAttributes(spec.attrs),
+		...spec.links ? { links: spec.links } : {},
 		status: {
 			code: spec.status,
 			...spec.message ? { message: spec.message } : {}
@@ -365,9 +343,9 @@ function settleNode(t, event) {
 		name: node.name,
 		startMs: node.startMs,
 		endMs: event.timestamp,
-		attrs: settledAttributes(node.attrs, event),
+		attrs: settledAttributes(node.attrs, event, t.telemetry),
 		status: down ? STATUS_ERROR : STATUS_OK,
-		message: down ? str(p.reason) ?? "child down" : void 0
+		message: down ? t.telemetry.includeEvalDetails ? truncate(str(p.reason) ?? "child down") : "child down" : void 0
 	});
 }
 function turnSpan(t, event) {
@@ -386,18 +364,134 @@ function turnSpan(t, event) {
 	};
 	if (parentId) attrs["tangle.supervise.node.id"] = parentId;
 	const p = record(event.payload);
-	assignTurnDetail(attrs, p);
+	assignTurnDetail(attrs, p, t.telemetry);
 	const spend = assignSpend(attrs, p.spend);
 	return otelSpan(t.traceId, {
 		spanId: generateSpanId(),
 		parentSpanId: parent.spanId,
 		name: "gen_ai.client.inference",
-		startMs: event.timestamp,
-		endMs: event.timestamp + (spend?.ms ?? 0),
+		startMs: event.timestamp - (spend?.ms ?? 0),
+		endMs: event.timestamp,
 		attrs,
 		status: STATUS_OK
 	});
 }
+/** Runtime-owned metadata only: prompts, arguments, results and error messages stay private. */
+function observationSpan(t, event) {
+	const p = record(event.payload);
+	const nodeId = event.target === "agent.steer" ? str(p.nodeId) ?? t.runId : event.parentId ?? t.runId;
+	const parent = parentSpan(t, nodeId);
+	const attrs = {
+		...t.base,
+		...t.identityOf.get(nodeId) ?? {},
+		[ATTR.parentConfidence]: parent.confidence,
+		"tangle.supervise.node.id": nodeId
+	};
+	const attempt = str(p.attemptId);
+	if (attempt) attrs[ATTR.attemptId] = attempt;
+	let name = event.target;
+	let links;
+	if (event.target === "agent.model") {
+		attrs[ATTR.spanKind] = "LLM";
+		name = "gen_ai.client.inference";
+		if (attempt) t.modeledAttempts.add(`${nodeId}:${attempt}`);
+		const model = str(p.model);
+		if (model) attrs[ATTR.model] = model;
+		for (const [field, key] of [
+			["tokensIn", ATTR.inputTokens],
+			["tokensOut", ATTR.outputTokens],
+			["costUsd", ATTR.costUsd]
+		]) if (typeof p[field] === "number" && Number.isFinite(p[field])) attrs[key] = p[field];
+	} else if (event.target === "agent.tool_call") {
+		attrs[ATTR.spanKind] = "TOOL";
+		const tool = str(p.toolName);
+		if (tool) attrs[ATTR.toolName] = tool;
+		const call = str(p.toolCallId);
+		if (call) attrs["tool.call_id"] = call;
+		if (typeof p.durationKnown === "boolean") attrs["tangle.tool.duration_known"] = p.durationKnown;
+	} else {
+		attrs[ATTR.spanKind] = "CHAIN";
+		if (event.target === "agent.steer") {
+			const target = str(p.nodeId);
+			if (target) attrs["tangle.supervise.steer.node_id"] = target;
+			const senderSpan = event.parentId === void 0 ? void 0 : t.spanIdOf.get(event.parentId);
+			if (senderSpan) links = [{
+				traceId: t.traceId,
+				spanId: senderSpan,
+				attributes: toOtlpAttributes({ [LINK_KIND_ATTR]: "steered_by" })
+			}];
+		} else {
+			const control = record(p.controlRef);
+			for (const key of [
+				"provider",
+				"environmentId",
+				"executionId",
+				"sessionId"
+			]) {
+				const value = str(control[key]);
+				if (value) attrs[`tangle.execution.${key}`] = value;
+			}
+			attrs["tangle.execution.phase"] = "dispatched";
+		}
+	}
+	const failed = p.status === "error";
+	if (typeof p.status === "string") attrs["tangle.observation.status"] = p.status;
+	const errorType = str(record(p.error).type);
+	if (errorType) attrs["error.type"] = truncate(errorType);
+	return otelSpan(t.traceId, {
+		spanId: generateSpanId(),
+		parentSpanId: parent.spanId,
+		name,
+		startMs: typeof p.startedAt === "number" ? p.startedAt : event.timestamp,
+		endMs: typeof p.endedAt === "number" ? p.endedAt : event.timestamp,
+		attrs,
+		status: failed ? STATUS_ERROR : p.status === "ok" ? STATUS_OK : STATUS_UNSET,
+		...links ? { links } : {}
+	});
+}
+/** One acknowledged driver outcome is execution evidence, never another model call. */
+function attemptSpan(t, event) {
+	const p = record(event.payload), attempt = record(p.record);
+	const duration = attempt.durationMs;
+	if (!Number.isSafeInteger(attempt.attempt) || Number(attempt.attempt) < 1 || typeof duration !== "number" || !Number.isFinite(duration) || duration < 0 || !Number.isFinite(event.timestamp)) return void 0;
+	const nodeId = str(p.nodeId) ?? event.parentId ?? t.runId;
+	const parent = parentSpan(t, nodeId);
+	const failure = turnFailureOf(attempt);
+	const failed = failure !== void 0 || typeof attempt.error === "string";
+	const attrs = {
+		...t.base,
+		...t.identityOf.get(nodeId) ?? {},
+		[ATTR.spanKind]: "CHAIN",
+		[ATTR.parentConfidence]: parent.confidence,
+		[ATTR.outcome]: failed ? "error" : "ok",
+		"tangle.supervise.node.id": nodeId
+	};
+	const id = str(p.attemptId);
+	if (id) attrs[ATTR.attemptId] = id;
+	if (typeof attempt.attempt === "number") attrs["tangle.driver.attempt"] = attempt.attempt;
+	for (const key of [
+		"classification",
+		"failureKind",
+		"stop"
+	]) {
+		const value = str(attempt[key]);
+		if (value) attrs[`tangle.driver.${key}`] = value;
+	}
+	if (failure) assignFailure(attrs, {
+		...turnFailurePolicy(failure),
+		providerCode: failure.code
+	});
+	if (failed) attrs["error.type"] = failure?.kind ?? "driver-attempt";
+	return otelSpan(t.traceId, {
+		spanId: generateSpanId(),
+		parentSpanId: parent.spanId,
+		name: "agent.execution",
+		startMs: event.timestamp - duration,
+		endMs: event.timestamp,
+		attrs,
+		status: failed ? STATUS_ERROR : STATUS_OK
+	});
+}
 /** The spans that close a run, yielded one at a time. A node still open never settled: its span is
 *  closed UNSET and explicitly marked, never dropped or reported as clean. */
 function* closingSpans(t, opts, endMs, outcome) {
@@ -423,12 +517,12 @@ function* closingSpans(t, opts, endMs, outcome) {
 		startMs: t.rootStartMs,
 		endMs,
 		attrs: {
-			...rootAttrs(t.base, opts.agentName ?? "supervisor", outcome),
+			...rootAttrs(t.base, opts.agentName ?? "supervisor", outcome, opts),
 			...t.rootIdentity,
 			...opts.parentSpanId ? { [ATTR.parentConfidence]: "explicit" } : {}
 		},
 		status: rootStatus(outcome),
-		message: rootMessage(outcome)
+		message: rootMessage(outcome, opts)
 	});
 }
 /** Build the span recorder for one run, or `undefined` when no exporter resolves (off by default; "configured but unreachable" also costs nothing). */
@@ -442,6 +536,7 @@ function createSupervisorSpanRecorder(opts) {
 	const rootStartMs = now();
 	const rootIdentity = agentIdentityAttributes(opts.agentIdentity);
 	const trace = {
+		telemetry: opts,
 		runId: opts.runId,
 		traceId,
 		rootSpanId,
@@ -452,6 +547,7 @@ function createSupervisorSpanRecorder(opts) {
 			...opts.attributes ?? {}
 		},
 		rootIdentity,
+		modeledAttempts: /* @__PURE__ */ new Set(),
 		identityOf: /* @__PURE__ */ new Map([[opts.runId, rootIdentity]]),
 		open: /* @__PURE__ */ new Map(),
 		spanIdOf: /* @__PURE__ */ new Map([[opts.runId, rootSpanId]])
@@ -467,12 +563,20 @@ function createSupervisorSpanRecorder(opts) {
 		hooks: { onEvent(event) {
 			if (finished) return;
 			try {
+				if (event.target === "agent.execution" && event.phase === "event") {
+					const span = attemptSpan(trace, event);
+					if (span) emit(span);
+					return;
+				}
 				if (event.phase !== "after") return;
 				if (event.target === "agent.spawn") openNode(trace, event);
 				else if (event.target === "agent.child") {
 					const settled = settleNode(trace, event);
 					if (settled) emit(settled);
-				} else if (event.target === "agent.turn") emit(turnSpan(trace, event));
+				} else if (event.target === "agent.turn") {
+					const attempt = str(record(event.payload).attemptId);
+					if (!attempt || !trace.modeledAttempts.has(`${event.parentId}:${attempt}`)) emit(turnSpan(trace, event));
+				} else if (event.target === "agent.model" || event.target === "agent.tool_call" || event.target === "agent.execution" || event.target === "agent.steer") emit(observationSpan(trace, event));
 			} catch {}
 		} },
 		traceId,
@@ -532,13 +636,14 @@ function spawnAttributes(base, event, identity) {
 	return attrs;
 }
 /** A node span's attributes at `agent.child`: the spawn-time ones plus how it settled. */
-function settledAttributes(opened, event) {
+function settledAttributes(opened, event, telemetry) {
 	const p = record(event.payload);
 	const status = str(p.status);
 	const attrs = {
 		...opened,
 		"tangle.supervise.node.status": status ?? "done"
 	};
+	assignFailure(attrs, p.failure);
 	if (typeof event.stepIndex === "number") attrs["tangle.supervise.node.seq"] = event.stepIndex;
 	if (typeof p.outRef === "string") attrs["tangle.supervise.node.out_ref"] = p.outRef;
 	if (typeof p.valid === "boolean") attrs["tangle.supervise.verdict.valid"] = p.valid;
@@ -546,7 +651,7 @@ function settledAttributes(opened, event) {
 	if (status === "down") {
 		attrs["error.type"] = p.infra === true ? "infra" : "child-down";
 		const reason = str(p.reason);
-		if (reason) attrs["error.message"] = truncate(reason);
+		if (reason && telemetry.includeEvalDetails) attrs["error.message"] = truncate(reason);
 		if (typeof p.infra === "boolean") attrs["tangle.supervise.node.infra"] = p.infra;
 	}
 	const wokeBy = str(record(p.wait).settled);
@@ -556,7 +661,7 @@ function settledAttributes(opened, event) {
 }
 /** Free-form `Scope.meter` detail: named keys get the canonical attribute, the rest ride
 *  namespaced and bounded so a caller's extra context survives without unbounded span growth. */
-function assignTurnDetail(attrs, payload) {
+function assignTurnDetail(attrs, payload, telemetry) {
 	for (const [key, value] of Object.entries(payload)) {
 		if (key === "spend") continue;
 		if (key === "driver" && typeof value === "string") {
@@ -568,6 +673,7 @@ function assignTurnDetail(attrs, payload) {
 			attrs["llm.model_name"] = value;
 			continue;
 		}
+		if (!telemetry.includeMetadata) continue;
 		if (Array.isArray(value)) {
 			const scalars = value.filter((v) => typeof v === "string" || typeof v === "number");
 			if (scalars.length > 0) attrs[`tangle.supervise.turn.${key}`] = truncate(scalars.join(","));
@@ -577,7 +683,18 @@ function assignTurnDetail(attrs, payload) {
 		else if (typeof value === "number" || typeof value === "boolean") attrs[`tangle.supervise.turn.${key}`] = value;
 	}
 }
-function rootAttrs(base, agentName, outcome) {
+function assignFailure(attrs, value) {
+	const failure = record(value);
+	for (const key of [
+		"owner",
+		"code",
+		"providerCode"
+	]) {
+		const field = str(failure[key]);
+		if (field) attrs[`tangle.failure.${key}`] = field;
+	}
+}
+function rootAttrs(base, agentName, outcome, telemetry) {
 	const attrs = {
 		...base,
 		[ATTR.spanKind]: "AGENT",
@@ -594,7 +711,8 @@ function rootAttrs(base, agentName, outcome) {
 			attrs["tangle.supervise.down_count"] = result.downCount;
 			if (result.reason === "driver-failed") {
 				attrs["error.type"] = result.error.name;
-				attrs["error.message"] = truncate(result.error.message);
+				assignFailure(attrs, result.error.failure);
+				if (telemetry.includeEvalDetails) attrs["error.message"] = truncate(result.error.message);
 			}
 		}
 		assignSpend(attrs, result.spentTotal);
@@ -603,7 +721,7 @@ function rootAttrs(base, agentName, outcome) {
 		attrs["tangle.supervise.result"] = "error";
 		const err = outcome.error;
 		attrs["error.type"] = err instanceof Error ? err.name : typeof err;
-		attrs["error.message"] = truncate(err instanceof Error ? err.message : String(err));
+		if (telemetry.includeEvalDetails) attrs["error.message"] = truncate(err instanceof Error ? err.message : String(err));
 	}
 	return attrs;
 }
@@ -612,8 +730,8 @@ function rootStatus(outcome) {
 	if (!outcome?.result) return STATUS_UNSET;
 	return outcome.result.kind === "winner" ? STATUS_OK : STATUS_ERROR;
 }
-function rootMessage(outcome) {
-	if (outcome?.error !== void 0) return truncate(outcome.error instanceof Error ? outcome.error.message : String(outcome.error));
+function rootMessage(outcome, telemetry) {
+	if (outcome?.error !== void 0 && telemetry.includeEvalDetails) return truncate(outcome.error instanceof Error ? outcome.error.message : String(outcome.error));
 	const result = outcome?.result;
 	return result && result.kind === "no-winner" ? result.reason : void 0;
 }
@@ -647,8 +765,16 @@ function assignBudget(attrs, value) {
 	if (!isRecord(value)) return;
 	const budget = value;
 	if (typeof budget.maxTokens === "number") attrs["tangle.supervise.budget.max_tokens"] = budget.maxTokens;
-	if (typeof budget.maxIterations === "number") attrs["tangle.supervise.budget.max_iterations"] = budget.maxIterations;
+	if (typeof budget.maxIterations === "number") {
+		attrs["tangle.supervise.budget.max_iterations"] = budget.maxIterations;
+		attrs[ATTR.maxIterations] = budget.maxIterations;
+	}
 	if (typeof budget.maxUsd === "number") attrs["tangle.supervise.budget.max_usd"] = budget.maxUsd;
+	if (typeof budget.deadlineMs === "number") attrs["tangle.supervise.budget.deadline_ms"] = budget.deadlineMs;
+	for (const [name, cap] of Object.entries(budget.resources ?? {})) {
+		attrs[`tangle.supervise.budget.resource.${name}.limit`] = cap.limit;
+		attrs[`tangle.supervise.budget.resource.${name}.unit`] = cap.unit;
+	}
 }
 /** A trace id is 32 hex chars: a valid caller-supplied one is used verbatim, anything else (and the
 *  default) is DERIVED by content address from namespace and run id, so a resumed run rejoins its trace. */
@@ -664,6 +790,7 @@ function str(value) {
 	return typeof value === "string" && value.length > 0 ? value : void 0;
 }
 function truncate(value) {
+	value = String(defaultRedactor(value));
 	return value.length > MAX_DETAIL_CHARS ? `${value.slice(0, MAX_DETAIL_CHARS)}…` : value;
 }
 // src/runtime/anytime.ts
@@ -4960,7 +5087,7 @@ function driverRetryLimits(run) {
 function extend(streak, error, at) {
 	const chain = causeChain(error);
 	const root = chain.find((cause) => !(cause instanceof RetainedExecutionPendingError)) ?? error;
-	const code = chain.find((cause) => cause instanceof HarnessTurnFailedError)?.errorCode;
+	const code = turnFailureOf(error)?.code ?? chain.find((cause) => cause instanceof HarnessTurnFailedError)?.errorCode;
 	const text = (code ? errMessage(root).replace(` (${code})`, "") : errMessage(root)).replace(/\d{4}-\d\d-\d\dT[\d:.]+Z?/gu, "<time>").replace(/\b(?=[\da-f-]*\d)[\da-f]{8,}(?:-[\da-f]{4,})*\b/giu, "<id>").replace(/\d{6,}/gu, "<n>");
 	if (streak?.error !== text || (streak.code ?? code) !== (code ?? streak.code)) return {
 		error: text,
@@ -5114,10 +5241,12 @@ var DriverRetryLoop = class {
 		};
 	}
 	failureRecord(failure) {
+		const producerFailure = turnFailureOf(failure.error);
 		return {
 			attempt: failure.attempt,
 			durationMs: failure.durationMs,
 			error: errMessage(failure.error),
+			...producerFailure === void 0 ? {} : { failure: producerFailure },
 			classification: failure.classification,
 			...failure.classification === "transient" ? { failureKind: transientFailureKind(failure.error) } : {},
 			madeProgress: failure.progressed
@@ -5359,10 +5488,10 @@ var DriverRetryLoop = class {
 		this.refusals = 0;
 		this.abandonments = 0;
 		const durationMs = this.limits.now() - startedAt;
-		const after = run.progress();
+		let after = run.progress();
 		const progressed = madeProgress(before, after);
-		const contract = contractOf(after);
-		const completed = {
+		let contract = contractOf(after);
+		let completed = {
 			attempt,
 			durationMs,
 			madeProgress: progressed,
@@ -5373,7 +5502,18 @@ var DriverRetryLoop = class {
 			this.stopPauses = 0;
 			this.lastProgressAt = this.limits.now();
 		} else if (!this.beforeModelEvent && this.reentry !== void 0 && this.reentry.reason !== "wake" && contract === "unmet") this.barrenReentries += 1;
-		if (run.wait !== void 0 && contract !== "met" && await this.wake(attempt, completed)) return true;
+		if (run.wait !== void 0 && contract !== "met") {
+			const waited = await this.wake(attempt, completed, after);
+			if (waited.reentered) return true;
+			after = waited.progress;
+			contract = contractOf(after);
+			completed = {
+				attempt,
+				durationMs,
+				madeProgress: madeProgress(before, after),
+				...contract === "none" ? {} : { contract }
+			};
+		}
 		if (contract === "unmet" && continuation !== void 0) {
 			let decision = await this.decideContinuation(continuation, attempt, after);
 			while ("refusedBy" in decision && decision.refusedBy === "budget-exhausted") {
@@ -5414,17 +5554,36 @@ var DriverRetryLoop = class {
 		});
 		return false;
 	}
-	async wake(attempt, completed, held) {
+	async wake(attempt, completed, beforeWait, held) {
 		const { run } = this;
 		const wait = run.wait;
-		if (wait === void 0 || (run.continuation?.closed() ?? false) || run.signal.aborted || !wait.open()) return false;
+		if (wait === void 0 || (run.continuation?.closed() ?? false) || run.signal.aborted || !wait.open()) return {
+			reentered: false,
+			progress: beforeWait
+		};
 		const stop = budgetStop(run.budget(), this.limits.now());
-		if (stop === "deadline" || stop !== void 0 && this.pausesStop(stop)) return false;
+		if (stop === "deadline" || stop !== void 0 && this.pausesStop(stop)) return {
+			reentered: false,
+			progress: beforeWait
+		};
 		const woken = await wait.wake(attempt + 1);
-		if (woken === void 0 || run.signal.aborted) return false;
+		const afterWait = run.progress();
+		if (madeProgress(beforeWait, afterWait)) {
+			completed = {
+				...completed,
+				madeProgress: true
+			};
+			this.barrenReentries = 0;
+			this.stopPauses = 0;
+			this.lastProgressAt = this.limits.now();
+		}
+		if (woken === void 0 || run.signal.aborted) return {
+			reentered: false,
+			progress: afterWait
+		};
 		const input = held ? `${held.input}\n\n${woken.input}` : woken.input;
 		const idleMs = woken.idleMs + (held?.idleMs ?? 0);
-		if (budgetStop(run.budget(), this.limits.now()) !== void 0) return this.wake(attempt, completed, {
+		if (budgetStop(run.budget(), this.limits.now()) !== void 0) return this.wake(attempt, completed, afterWait, {
 			input,
 			idleMs
 		});
@@ -5439,7 +5598,10 @@ var DriverRetryLoop = class {
 			input,
 			wake: this.wakes
 		};
-		return true;
+		return {
+			reentered: true,
+			progress: afterWait
+		};
 	}
 };
 // src/runtime/supervise/driver-retry.ts
@@ -7815,8 +7977,7 @@ var DriverExecutionAttempt = class {
 			sink.state.driveTurns += 1;
 			if (turnStop !== void 0 && turns >= sink.turnCap && !turnStop.signal.aborted) turnStop.abort(`supervise: maxTurns ${sink.turnCap} reached`);
 		} else if (event.kind === "progress") {
-			sink.rootStream?.append(event.progress);
-			sink.noteDriveProgress(event.progress);
+			sink.observeProgress(event.progress);
 			sink.onModelEvent?.();
 		} else this.pendingUsage.push(event);
 		await this.meterPending();
@@ -8088,13 +8249,18 @@ var ManagerDriveSession = class {
 		const paused = [...await seatSelection.journal.loadTree(seatJournalRoot) ?? []].reverse().find((event) => event.id === scope.view.root && (event.kind === "seat-paused" || event.kind === "seat-segment" && event.phase === "started"));
 		let pausedUntil = paused?.kind === "seat-paused" ? paused.resumeAt : void 0;
 		let afterRecheck = pausedUntil !== void 0 && Date.parse(pausedUntil) <= now();
+		let resumeAdmission;
 		for (;;) try {
 			const seat = await seatChain.next(usageLimit && !afterRecheck, afterRecheck);
+			await resumeAdmission?.();
 			this.activeSeat = seat;
 			if (afterRecheck) await seatSelection.onPause(scope.view.root, "", "resumed");
 			return seat;
 		} catch (error) {
 			if (!(error instanceof SeatPauseError)) throw error;
+			resumeAdmission = await pauseScopeSeatAdmission(scope, error.resumeAt);
+			await releaseScopeRetainedOwnerForSeatPause(scope, error.resumeAt).catch(() => void 0);
+			resumeAdmission = await pauseScopeSeatAdmission(scope, error.resumeAt);
 			if (error.resumeAt !== pausedUntil) {
 				pausedUntil = error.resumeAt;
 				await seatSelection.journal.appendEvent(seatJournalRoot, {
@@ -8107,7 +8273,6 @@ var ManagerDriveSession = class {
 				});
 				await seatSelection.onPause(scope.view.root, error.resumeAt, "paused");
 			}
-			await releaseScopeRetainedOwnerForSeatPause(scope, error.resumeAt).catch(() => void 0);
 			const wakeAt = Date.now() + Math.max(0, Date.parse(error.resumeAt) - now());
 			while (Date.now() < wakeAt) {
 				scope.signal.throwIfAborted();
@@ -8143,10 +8308,16 @@ async function executeDriverAttempt(input) {
 		...input.coordinationMcpHeaders ? { headers: input.coordinationMcpHeaders } : {},
 		metadata: { toolTimeoutMs: COORDINATION_CLIENT_TOOL_TIMEOUT_MS }
 	};
-	const executor = (reusedAttemptFactory(input) ?? await providerAttemptFactory(input, identity.providerProfile.harness))(spec, {
+	const factory = reusedAttemptFactory(input) ?? await providerAttemptFactory(input, identity.providerProfile.harness);
+	const observation = scopeOwnerExecutionObservation(scope, (event) => {
+		input.rootStream?.append(event);
+		input.noteDriveProgress(event);
+	});
+	const executor = factory(spec, {
 		signal: scope.signal,
 		node: scopeOwnerExecutorNodeContext(scope),
 		seams: {
+			[executorObservationSeamKey]: observation,
 			...retainedOwner ? { [retainedExecutorSeamKey]: {
 				...retainedOwner,
 				onResult: async (result) => attempt.commitOwnerResult(result)
@@ -8174,7 +8345,10 @@ async function executeDriverAttempt(input) {
 		if (retainedOwner?.admissions.length && !executor.recover) throw new ValidationError("retained owner executor does not support recovery");
 		await input.rootStream?.beginAttempt();
 		const run = retainedOwner?.admissions.length ? executor.recover(input.originalTask, scope.signal) : executor.execute(input.originalTask, scope.signal);
-		if (isAsyncIterable(run)) await attempt.drainStream(run, input);
+		if (isAsyncIterable(run)) await attempt.drainStream(run, {
+			...input,
+			observeProgress: observation.progress
+		});
 		else await attempt.settleReturned(await run);
 		await attempt.publishAcknowledgement(pending);
 		attempt.completed = true;
@@ -8372,14 +8546,11 @@ function driveHarnessFromBackend(backend, executionId, now = Date.now, maxTurns,
 	};
 	return attestRuntimeOwnedScopeOwner(Object.assign(drive, seatSelection ? { seatChain: true } : {}), manager.ownerRuntime);
 }
-async function bindDriveRetainedOwner(manager, { scope, profile, authoredProfile }) {
-	const { state, activeSeat } = manager;
+async function bindDriveRetainedOwner(manager, { scope }) {
+	const { state } = manager;
 	const retainedOwner = state.boundBackend.backend === "provider" ? scopeRetainedOwnerContext(scope) : void 0;
 	if (retainedOwner && state.boundBackend.backend === "provider") {
-		bindScopeRetainedOwnerProvider(scope, resolveAgentEnvironmentProvider(state.boundBackend.provider, state.boundBackend.registry), state.boundBackend.workspaceRetention === void 0 ? void 0 : {
-			port: state.boundBackend.workspaceRetention,
-			profile: activeSeat ? seatProviderProfile(authoredProfile, activeSeat) : profile
-		});
+		bindScopeRetainedOwnerProvider(scope, resolveAgentEnvironmentProvider(state.boundBackend.provider, state.boundBackend.registry));
 		bindScopeRetainedOwnerEnvironmentId(scope, () => {
 			if (state.activeExecutor === void 0) return void 0;
 			const execution = runtimeOwnedExecutorMaterialization(state.activeExecutor)?.execution;
@@ -8995,13 +9166,7 @@ function pendingCancellationRun(profile, task, opts) {
 		if (backend?.backend === "provider" && !options.driveHarness && !options.resolveDriveHarness) {
 			const provider = typeof backend.provider === "string" ? backend.registry?.get(backend.provider) : backend.provider;
 			const priorProviders = new Set((prior ?? []).flatMap((event) => event.id === runId && event.kind === "execution-admitted" ? [event.admission.phase === "dispatched" ? event.admission.controlRef.provider : event.admission.provider] : []));
-			if (provider !== void 0 && priorProviders.size === 1 && priorProviders.has(provider.name)) attestRuntimeOwnedScopeOwner(rootAgent, root?.kind === "spawned" ? root.runtime : provider.name, {
-				provider,
-				...backend.workspaceRetention === void 0 ? {} : { checkpointCapture: {
-					port: backend.workspaceRetention,
-					profile: providerVisibleProfile(canonicalProfile)
-				} }
-			});
+			if (provider !== void 0 && priorProviders.size === 1 && priorProviders.has(provider.name)) attestRuntimeOwnedScopeOwner(rootAgent, root?.kind === "spawned" ? root.runtime : provider.name, { provider });
 		}
 		const result = await createSupervisor().run(rootAgent, canonicalTask, {
 			budget,
@@ -9181,7 +9346,7 @@ function runHooks(options, recorder, workers) {
 }
 function rootRunOptions(run, runDir, hooks, recorder) {
 	const { setup, workers } = run;
-	const { options, ctx, registeredProfile, managerBackend, rootOwnerRuntime } = setup;
+	const { options, ctx, registeredProfile, rootOwnerRuntime } = setup;
 	const recoverExecutor = options.recoverExecutor ?? workers.recoveryFactories.get(workers.workerFactory);
 	return {
 		budget: options.budget,
@@ -9208,7 +9373,6 @@ function rootRunOptions(run, runDir, hooks, recorder) {
 		...options.childSettleGraceMs !== void 0 ? { childSettleGraceMs: options.childSettleGraceMs } : {},
 		...options.teardownConfirmMs !== void 0 ? { teardownConfirmMs: options.teardownConfirmMs } : {},
 		...options.retainedAtSettlement !== void 0 ? { retainedAtSettlement: options.retainedAtSettlement } : {},
-		ownerWorkspaceRetention: managerBackend?.backend === "provider" && managerBackend.workspaceRetention !== void 0,
 		...options.workerSlots !== void 0 ? { workerSlots: options.workerSlots } : {},
 		...options.reservationPolicy ? { reservationPolicy: options.reservationPolicy } : {},
 		...options.deadlineCheckIn === void 0 ? {} : { deadlineCheckIn: options.deadlineCheckIn },
@@ -9282,4 +9446,4 @@ function superviseWithContext(profile, task, opts, brain) {
 }
 export { dumbContinuationPassPrompt as A, areaUnderCurve as B, defaultEdgeTraversalCap as C, createPromptRegistry as D, analyzesFindingsReportPrompt as E, allWorkersStalled as F, plateauLength as H, anyOf as I, noProgressFor as L, kernelPromptRegistry as M, naiveContinuationPrompt as N, delegatesWorkerBriefPrompt as O, promptHandle as P, plateau as R, validateFlowGraph as S, validateGraphTopology as T, renderAnytimeTable as U, bestSoFar as V, createSupervisorSpanRecorder as W, GraphRouteError as _, superviseRootProfile as a, journaledGateDecider as b, supervisorAgentWithTestBrain as c, composeReentryTask as d, serveCoordinationMcp as f, createGraphOverlay as g, runBrainLoop as h, profileGuidanceComposer as i, formatPromptHandle as j, dumbContinuationFailPrompt as k, runToolSpans as l, driverAgent as m, superviseFleetCapabilities as n, workerFromBackend as o, coordinationControlToolNames as p, superviseWithTestBrain as r, supervisorAgent as s, supervise as t, UNPROVEN_CONTINUITY as u, createFlowRun as v, graphRootProfile as w, routeFlowOf as x, flowRootProfile as y, anytimeReport as z };
 
-//# sourceMappingURL=supervise-rYEsVVcn.js.map
+//# sourceMappingURL=supervise-Cqhkb2Oj.js.map