@tangle-network/agent-runtime 6.0.1 → 6.0.3

package/dist/failure-cause-BzjUUsRz.js

@@ -0,0 +1,3208 @@
+import { m as ValidationError, r as BackendTransportError, t as AgentEvalError } from "./errors-AzSuGI23.js";
+import { A as withBudgetResources, C as unreportedSpend, D as addResourceSpend, E as zeroTokenUsage, O as assertResources, T as zeroSpend, i as chargedTokens, l as fnv1a32Hex, m as promptCacheTokenClasses, n as addSpend, o as cloneTokenUsage, r as addTokenUsage, u as hasCompleteCacheBreakdown } from "./util-C_cdPNC4.js";
+import { a as errMessage, i as causeChain, n as detachedSnapshot, s as errorProperty } from "./snapshot-Cgj2Wzi6.js";
+import { AgentTurnResultSchema, CanonicalStreamEventSchema, RuntimeEventEnvelopeSchema } from "@tangle-network/agent-interface";
+import { isRecord } from "@tangle-network/agent-core";
+import { collectAgentFinalMessageText, collectAgentResponseText } from "@tangle-network/sandbox";
+import { z } from "zod";
+import { AgentTurnFailureSchema } from "@tangle-network/agent-interface/environment-provider";
+import { createHash } from "node:crypto";
+import { setImmediate } from "node:timers/promises";
+import { LedgerCanonicalizationError, canonicalString, jsonDocument, merkleLeafHash, merkleRoot, merkleSalt } from "@tangle-network/agent-eval/ledger-core";
+// src/record-value.ts
+function recordValue(value) {
+	return isRecord(value) ? value : void 0;
+}
+// src/runtime/harness-usage.ts
+/**
+* Read and validate one codex `turn.completed` usage record.
+*
+* Every counter must be a non-negative safe integer. Two cross-field invariants hold, and they are
+* what states that the two named counters are SUBSETS of their totals rather than additions to
+* them: `cached_input_tokens <= input_tokens` and `reasoning_output_tokens <= output_tokens`.
+* Measured against the codex CLI: a turn reporting `output_tokens 1523` with
+* `reasoning_output_tokens 1516` answered with about seven tokens of text.
+*
+* `label` names the surface the record came from, so one message serves both readers.
+* Throws `ValidationError` on any violation.
+*/
+function parseCodexUsageRecord(usage, label) {
+	const record = recordValue(usage);
+	if (record === void 0) throw new ValidationError(`${label}: usage must be an object, received ${describe(usage)}`);
+	const inputTokens = naturalNumber(record.input_tokens, "input_tokens", label);
+	const cachedInputTokens = naturalNumber(record.cached_input_tokens, "cached_input_tokens", label);
+	const outputTokens = naturalNumber(record.output_tokens, "output_tokens", label);
+	const reasoningOutputTokens = naturalNumber(record.reasoning_output_tokens, "reasoning_output_tokens", label);
+	const cacheWriteInputTokens = record.cache_write_input_tokens === void 0 ? void 0 : naturalNumber(record.cache_write_input_tokens, "cache_write_input_tokens", label);
+	if (cachedInputTokens > inputTokens) throw new ValidationError(`${label}: cached_input_tokens exceeds input_tokens`);
+	if (reasoningOutputTokens > outputTokens) throw new ValidationError(`${label}: reasoning_output_tokens exceeds output_tokens`);
+	return {
+		inputTokens,
+		cachedInputTokens,
+		outputTokens,
+		reasoningOutputTokens,
+		...cacheWriteInputTokens === void 0 ? {} : { cacheWriteInputTokens }
+	};
+}
+/** Names the wire record every codex decode error is reported against. */
+const codexUsageContext = "codex turn.completed";
+/**
+* codex reports the tokens of a turn inside its own `turn.completed` event, which rides the
+* transport either as `{ type: 'raw', data: { type: 'turn.completed', usage: { … } } }` or as
+* the provider-normalized Interface envelope `{ type: 'raw', data: { type: 'raw', event: {
+* type: 'turn.completed', usage: { … } } } }`. It emits no canonical usage event, so this adapter
+* is a codex worker's only usage source.
+*
+* The record is read by `parseCodexUsageRecord`, the same reader `runLocalHarness` uses on the
+* codex CLI's own stdout, so both surfaces hold one field policy and both cross-field invariants.
+*
+* A `turn.completed` that carries a `usage` member the reader cannot read is a `ValidationError`
+* naming the field. A `turn.completed` with no `usage` member reports no usage at all, which
+* leaves the turn's tokens unknown rather than zero.
+*/
+const decodeCodexTurnUsage = (event) => {
+	if (String(event.type ?? "") !== "raw") return void 0;
+	const envelope = recordValue(event.data);
+	const data = envelope?.type === "raw" && recordValue(envelope.event) !== void 0 ? recordValue(envelope.event) : envelope;
+	if (data === void 0 || data.type !== "turn.completed" || data.usage === void 0) return;
+	const record = parseCodexUsageRecord(data.usage, codexUsageContext);
+	return {
+		harness: "codex",
+		input: record.inputTokens,
+		output: record.outputTokens,
+		cachedInput: record.cachedInputTokens,
+		reasoningOutput: record.reasoningOutputTokens,
+		...record.cacheWriteInputTokens === void 0 ? {} : { cacheWriteInput: record.cacheWriteInputTokens }
+	};
+};
+/** Claude's adapter forwards one delta per response snapshot, keyed and deduplicated there. */
+const decodeClaudeAssistantUsage = (event) => {
+	if (String(event.type ?? "") !== "raw") return void 0;
+	const envelope = recordValue(event.data);
+	const data = envelope?.type === "raw" && recordValue(envelope.event) !== void 0 ? recordValue(envelope.event) : envelope;
+	if (data?.type !== "assistant.usage") return void 0;
+	if (typeof data.message_id !== "string" || data.message_id.length === 0) throw new ValidationError("claude assistant.usage: missing response identity");
+	const usage = recordValue(data.usage);
+	if (!usage) throw new ValidationError("claude assistant.usage: usage must be an object");
+	const fresh = naturalNumber(usage.input_tokens, "input_tokens", "claude assistant.usage");
+	const cachedInput = naturalNumber(usage.cache_read_input_tokens, "cache_read_input_tokens", "claude assistant.usage");
+	const cacheWriteInput = naturalNumber(usage.cache_creation_input_tokens, "cache_creation_input_tokens", "claude assistant.usage");
+	const output = naturalNumber(usage.output_tokens, "output_tokens", "claude assistant.usage");
+	const input = fresh + cachedInput + cacheWriteInput;
+	if (!Number.isSafeInteger(input)) throw new ValidationError("claude assistant.usage: total input tokens exceed a safe integer");
+	return {
+		harness: "claude-code",
+		input,
+		output,
+		cachedInput,
+		cacheWriteInput
+	};
+};
+/**
+* The harness → usage-decoder registry. Add a harness by adding one entry.
+*
+* Keyed by `HarnessType`, the vocabulary the `harness` argument is drawn from, so a key no caller
+* can produce does not compile. A harness absent from this registry reports usage through the
+* canonical events or not at all.
+*/
+const harnessUsageDecoders = {
+	codex: decodeCodexTurnUsage,
+	"claude-code": decodeClaudeAssistantUsage
+};
+/**
+* Decode a sandbox event with one harness's adapter, or `undefined` when the event carries no
+* harness-native usage.
+*
+* A NAMED harness reads with that harness's adapter only, and a named harness with no adapter
+* reports nothing. It never falls through to another harness's adapter: a different harness's
+* `turn.completed` decoded as codex would either drop the counters codex does not name or fail on
+* a field codex requires, and both answers would be about the wrong harness. The composite over
+* every registered adapter runs only when the caller cannot name the harness.
+*
+* Throws `ValidationError` when an adapter recognizes the event as its harness's usage carrier and
+* cannot read the numbers.
+*/
+function decodeHarnessUsage(event, harness) {
+	if (!event || typeof event !== "object") return void 0;
+	if (harness !== void 0) return harnessUsageDecoders[harness]?.(event);
+	for (const decode of new Set(Object.values(harnessUsageDecoders))) {
+		const usage = decode(event);
+		if (usage !== void 0) return usage;
+	}
+}
+function naturalNumber(value, field, label) {
+	if (typeof value !== "number" || !Number.isSafeInteger(value) || value < 0) throw new ValidationError(`${label}: usage.${field} must be a non-negative safe integer, received ${describe(value)}`);
+	return value;
+}
+function describe(value) {
+	if (value === null) return "null";
+	if (typeof value === "number" || typeof value === "boolean") return String(value);
+	if (typeof value === "string") return JSON.stringify(value);
+	if (Array.isArray(value)) return "an array";
+	return typeof value;
+}
+// src/runtime/sandbox-events.ts
+/**
+* Forward a sandbox event to an optional observer without letting observer
+* behavior affect the run. The observer receives a defensive copy, synchronous
+* throws are swallowed, and returned promises are deliberately not awaited.
+*/
+function notifySandboxEventObserver(event, observer, meta) {
+	if (!observer) return;
+	try {
+		const result = observer(cloneEventForObserver(event), meta);
+		if (result && typeof result.then === "function") result.then(void 0, () => {});
+	} catch {}
+}
+function cloneEventForObserver(event) {
+	try {
+		return structuredClone(event);
+	} catch {
+		return copyPlainSpine(event, /* @__PURE__ */ new WeakMap());
+	}
+}
+function copyPlainSpine(value, seen) {
+	if (value === null || typeof value !== "object") return value;
+	const existing = seen.get(value);
+	if (existing !== void 0) return existing;
+	if (Array.isArray(value)) {
+		const copy = [];
+		seen.set(value, copy);
+		for (const item of value) copy.push(copyPlainSpine(item, seen));
+		return copy;
+	}
+	const proto = Object.getPrototypeOf(value);
+	if (proto !== Object.prototype && proto !== null) return {};
+	const copy = {};
+	seen.set(value, copy);
+	for (const [key, child] of Object.entries(value)) copy[key] = copyPlainSpine(child, seen);
+	return copy;
+}
+/**
+* Read the served execution identity off one Sandbox event: the platform reports `effectiveBackend`
+* on `execution.started` and again on the terminal event. Absence stays unknown — a request is
+* not a receipt, so nothing here may be inferred from what was asked for.
+*/
+function sandboxEventServedBackend(event) {
+	const served = recordValue(recordValue(event?.data)?.effectiveBackend);
+	const named = [
+		"provider",
+		"model",
+		"source"
+	].flatMap((key) => {
+		const value = firstString(served?.[key]);
+		return value === void 0 ? [] : [[key, value]];
+	});
+	if (!named.some(([key]) => key !== "source")) return void 0;
+	return Object.fromEntries(named);
+}
+/**
+* Fail the execution when the platform reports serving a model other than the exact one asked for.
+* Measured motive (agent-runtime#892): 6 of 6 boxes declaring `zai-coding-plan/glm-5.2` reported
+* `deepseek/deepseek-v4-flash` (`source: "environment"`) while the materialization receipt recorded
+* the declared model as known; only reading the report back detects the substitution.
+* Silent when the platform reports no served model: unobserved stays unobserved.
+*/
+function assertSandboxServedModel(event, expected) {
+	const wanted = expected?.model?.trim();
+	const served = wanted ? sandboxEventServedBackend(event) : void 0;
+	if (!wanted || served?.model === void 0) return;
+	if (sameModelId(served.model, wanted, [served.provider, expected?.provider])) return;
+	const attribution = Object.entries({
+		provider: served.provider,
+		source: served.source
+	}).flatMap(([key, value]) => value === void 0 ? [] : [`${key} ${JSON.stringify(value)}`]);
+	const detail = attribution.length > 0 ? ` (${attribution.join(", ")})` : "";
+	throw new Error(`sandbox served model ${JSON.stringify(served.model)}${detail} instead of the exact profile model ${JSON.stringify(wanted)}`);
+}
+/**
+* Do two model ids name the same model, allowing for routing prefixes?
+*
+* Either side may spell the model bare (`glm-5.2`), provider-qualified
+* (`zai-coding-plan/glm-5.2`), or route-qualified, and the platform reports the provider in its
+* own field rather than always in the id. So the comparison drops any known provider prefix and
+* then accepts a `/`-boundary suffix match: a longer route to the SAME leaf model is a routing
+* difference, not a substitution.
+*
+* What it deliberately does NOT absorb is a different leaf: `glm-5.2` against `glm-5.3` stays a
+* mismatch, which is the substitution measured directly against the provider API (a request for
+* `glm-5.2` was served `glm-5.3`). A version suffix is the whole difference between two
+* instruments, so nothing here may treat it as noise.
+*/
+function sameModelId(served, wanted, providers) {
+	const a = stripProviderPrefix(served, providers);
+	const b = stripProviderPrefix(wanted, providers);
+	return a === b || a.endsWith(`/${b}`) || b.endsWith(`/${a}`);
+}
+function stripProviderPrefix(id, providers) {
+	let out = id.trim().toLowerCase();
+	for (const provider of providers) {
+		const prefix = provider?.trim().toLowerCase();
+		if (prefix && out.startsWith(`${prefix}/`)) out = out.slice(prefix.length + 1);
+	}
+	return out;
+}
+function firstString(...values) {
+	return values.find((value) => typeof value === "string" && value.length > 0);
+}
+const terminalTypes = /* @__PURE__ */ new Set([
+	"message.completed",
+	"result",
+	"final",
+	"done"
+]);
+/** True for an event type that ends a sandbox turn. */
+function isSandboxTerminalEvent(type) {
+	return terminalTypes.has(type);
+}
+/**
+* Which member of a terminal event's `data` carries its usage receipt.
+*
+* The one place the terminal types legitimately differ, stated rather than implied by two lists:
+* sandbox 0.4.0's `done` reports under `tokenUsage` with the cost at the top level, every other
+* terminal type reports under `usage`.
+*/
+function sandboxTerminalUsageField(type) {
+	return type === "done" ? "tokenUsage" : "usage";
+}
+/**
+* Extract a `RuntimeStreamEvent`-shaped `llm_call` from a sandbox event when
+* the event carries usage/cost data. Returns `undefined` for non-cost events
+* so the kernel can iterate the full stream without branching.
+*
+* Pure by contract: it never throws on a failed run. The terminal truth
+* boundary is the public Sandbox outcome tracker, applied after the complete
+* stream. Post-hoc readers — {@link sumSandboxUsage}, the
+* analyst trace store, the chat projection — must stay able to read a failed
+* turn's events, which is when reading them matters most.
+*
+* Canonical cost-carrying types observed in the wild:
+*   - `llm_call` — `data: { model, tokensIn, tokensOut, costUsd, ... }`
+*   - `message.completed` / `result` — `data: { usage: { inputTokens,
+*      outputTokens, totalCostUsd? } }`
+*   - `cost.usage` / `usage` — same shape under a dedicated type
+*
+* Numeric coercion is strict: `Number.isFinite` gates every accumulator write
+* so a sentinel `NaN` from a misbehaving backend cannot poison the ledger.
+*/
+function extractLlmCallEvent(event, agentRunName) {
+	const data = canonicalUsageData(event);
+	return data === void 0 ? void 0 : buildLlmCall(data, agentRunName);
+}
+function canonicalUsageData(event) {
+	if (!event || typeof event !== "object") return void 0;
+	const type = String(event.type ?? "");
+	const data = event.data && typeof event.data === "object" ? event.data : {};
+	if (type === "llm_call" || type === "cost.usage" || type === "usage") return usageReceiptData(data, recordValue(data.usage));
+	if (type === "error" || isSandboxTerminalEvent(type)) {
+		const field = type === "error" ? "tokenUsage" : sandboxTerminalUsageField(type);
+		return usageReceiptData(data, recordValue(data[field]) ?? recordValue(data[field === "usage" ? "tokenUsage" : "usage"]));
+	}
+}
+/** A {@link SandboxUsageLedger} for one worker. Pass the worker's harness to decode with that
+*  harness's adapter; omit it to try every registered adapter. */
+function createSandboxUsageLedger(harness) {
+	let held = [];
+	let sawCanonical = false;
+	const credited = {};
+	const receipts = /* @__PURE__ */ new Map();
+	const settledTokens = zeroTokenUsage();
+	let turnTokens = zeroTokenUsage();
+	let turnUsageUnknown = false;
+	let settledUsage;
+	return {
+		settledUsage: () => settledUsage === void 0 ? void 0 : { ...settledUsage },
+		tokenUsage() {
+			const total = cloneTokenUsage(settledTokens);
+			addTokenUsage(total, turnTokens);
+			return total;
+		},
+		observe(event, agentRunName) {
+			const call = extractLlmCallEvent(event, agentRunName);
+			if (call) {
+				sawCanonical = true;
+				const receipt = creditCanonicalUsage(event, call, credited, receipts, (receipt, mode) => {
+					refineCanonicalTokens(turnTokens, call, receipt, mode);
+				});
+				if (receipt?.tokensKnown === false) {
+					turnTokens.tokensKnown = false;
+					turnUsageUnknown = true;
+				}
+				return receipt;
+			}
+			let usage;
+			try {
+				usage = decodeHarnessUsage(event, harness);
+			} catch (err) {
+				turnUsageUnknown = true;
+				return {
+					type: "llm_call",
+					model: agentRunName,
+					tokensKnown: false,
+					usdKnown: false,
+					tokensUnknownReason: err instanceof Error ? err.message : String(err)
+				};
+			}
+			if (usage) held.push(usage);
+		},
+		settleTurn(agentRunName) {
+			const reports = held;
+			const canonical = sawCanonical;
+			held = [];
+			sawCanonical = false;
+			const receipt = !canonical && reports.length > 0 ? harnessUsageLlmCall(reports, agentRunName) : void 0;
+			if (receipt) creditCanonicalUsage({
+				type: "llm_call",
+				data: {}
+			}, receipt, credited, receipts, (credit, mode) => refineCanonicalTokens(turnTokens, receipt, credit, mode));
+			settledUsage = !turnUsageUnknown && credited.tokensIn !== void 0 && credited.tokensOut !== void 0 ? {
+				inputTokens: credited.tokensIn,
+				outputTokens: credited.tokensOut,
+				...credited.totalTokens === void 0 ? {} : { totalTokens: credited.totalTokens },
+				...credited.reasoningTokens === void 0 ? {} : { reasoningTokens: credited.reasoningTokens },
+				...credited["promptCache.readTokens"] === void 0 ? {} : { cacheReadInputTokens: credited["promptCache.readTokens"] },
+				...credited["promptCache.writeTokens"] === void 0 ? {} : { cacheCreationInputTokens: credited["promptCache.writeTokens"] },
+				...credited.costUsd === void 0 ? {} : { cost: credited.costUsd }
+			} : void 0;
+			for (const key of Object.keys(credited)) delete credited[key];
+			receipts.clear();
+			addTokenUsage(settledTokens, turnTokens);
+			turnTokens = zeroTokenUsage();
+			turnUsageUnknown = false;
+			return receipt;
+		}
+	};
+}
+/** Shared receipt semantics; an undeclared nonterminal observation is not a cumulative total. */
+function canonicalSandboxUsageMode(event) {
+	const declaredMode = recordValue(event.data)?.usageMode;
+	return declaredMode === "delta" || declaredMode === "cumulative" ? declaredMode : declaredMode === void 0 && event.type === "llm_call" ? "delta" : declaredMode === void 0 && (event.type === "error" || isSandboxTerminalEvent(String(event.type))) ? "cumulative" : void 0;
+}
+/** Terminal totals replace already credited usage; only per-call receipts add to it. */
+function creditCanonicalUsage(event, call, credited, receipts, onCredit) {
+	const mode = canonicalSandboxUsageMode(event);
+	const result = { ...call };
+	const data = recordValue(event.data) ?? {};
+	const usageData = canonicalUsageData(event) ?? {};
+	const supplemental = Object.fromEntries(["totalTokens", "reasoningTokens"].flatMap((key) => {
+		const value = usageData[key];
+		return value === void 0 ? [] : [[key, typeof value === "number" && Number.isFinite(value) ? value : null]];
+	}));
+	const explicitTokensUnknown = [
+		data,
+		recordValue(data.usage),
+		recordValue(data.tokenUsage)
+	].some((receipt) => ["tokensKnown", "tokens_known"].some((key) => receipt?.[key] !== void 0 && receipt[key] !== true));
+	if (call.tokensIn === void 0 && call.tokensOut === void 0 && !call.tokensUnknownReason && !explicitTokensUnknown) delete result.tokensKnown;
+	let reason = mode === void 0 ? "usage receipt has no declared delta or cumulative semantics" : void 0;
+	if (event.id) {
+		const signature = JSON.stringify({
+			mode,
+			call,
+			supplemental
+		});
+		const previous = receipts.get(event.id);
+		if (previous === signature) return void 0;
+		if (previous !== void 0) return {
+			type: "llm_call",
+			model: call.model,
+			tokensKnown: false,
+			usdKnown: false,
+			tokensUnknownReason: `usage receipt ${event.id} changed after it was credited`
+		};
+		receipts.set(event.id, signature);
+	}
+	const credit = (key, value) => {
+		const previous = credited[key] ?? 0;
+		if (!Number.isFinite(value) || value < 0) {
+			reason = `usage receipt has an invalid ${key}`;
+			return 0;
+		}
+		if (mode === "delta") {
+			credited[key] = previous + value;
+			return value;
+		}
+		if (value < previous) reason = `cumulative usage ${key} is below already credited usage`;
+		credited[key] = Math.max(previous, value);
+		return Math.max(0, value - previous);
+	};
+	for (const key of [
+		"tokensIn",
+		"tokensOut",
+		"costUsd",
+		"estimatedCostUsd"
+	]) if (call[key] !== void 0) result[key] = credit(key, call[key]);
+	for (const [key, value] of Object.entries(supplemental)) if (typeof value !== "number") reason = `usage receipt has an invalid ${key}`;
+	else credit(key, value);
+	if (call.promptCache) result.promptCache = Object.fromEntries(Object.entries(call.promptCache).map(([key, value]) => [key, typeof value === "number" ? credit(`promptCache.${key}`, value) : value]));
+	if (reason !== void 0) {
+		result.usdKnown = false;
+		if (call.tokensIn !== void 0 || call.tokensOut !== void 0) {
+			result.tokensKnown = false;
+			result.tokensUnknownReason = reason;
+		}
+	}
+	onCredit(result, mode);
+	return result;
+}
+/** Cache partitions belong to the original receipt, not the smaller incremental charge. */
+function refineCanonicalTokens(tokens, call, receipt, mode) {
+	const input = receipt.tokensIn ?? 0;
+	const output = receipt.tokensOut ?? 0;
+	const cache = promptCacheTokenClasses(call.tokensIn, call.promptCache);
+	if (mode !== "cumulative") {
+		addTokenUsage(tokens, {
+			input,
+			output,
+			...cache
+		});
+		return;
+	}
+	tokens.input += input;
+	tokens.output += output;
+	if (cache.freshInput !== void 0 && call.tokensIn === tokens.input && receipt.tokensKnown !== false) {
+		tokens.freshInput = cache.freshInput;
+		tokens.cacheRead = cache.cacheRead;
+		tokens.cacheWrite = cache.cacheWrite;
+		delete tokens.cacheBreakdownKnown;
+		return;
+	}
+	if (cache.cacheRead !== void 0) tokens.cacheRead = Math.max(tokens.cacheRead ?? 0, cache.cacheRead);
+	if (cache.cacheWrite !== void 0) tokens.cacheWrite = Math.max(tokens.cacheWrite ?? 0, cache.cacheWrite);
+	if ((tokens.freshInput ?? 0) + (tokens.cacheRead ?? 0) + (tokens.cacheWrite ?? 0) > tokens.input) {
+		delete tokens.freshInput;
+		delete tokens.cacheRead;
+		delete tokens.cacheWrite;
+	}
+	if (input > 0 || cache.cacheBreakdownKnown === false) tokens.cacheBreakdownKnown = false;
+}
+/**
+* Fold harness-native usage reports into the canonical `llm_call` the accounting paths read.
+*
+* Every counter a `HarnessUsage` carries beside `input` and `output` CLASSIFIES one of those two
+* totals, so none of them is added to the total it describes:
+*
+*   - the prompt-cache counters classify `input` and ride `promptCache`, the convention the
+*     terminal `tokenUsage` branch above already follows and `promptCacheTokenClasses` folds,
+*     where `freshInput = input - cacheRead - cacheWrite`;
+*   - `reasoningOutput` classifies `output`. Codex counts its reasoning tokens INSIDE
+*     `output_tokens` — a turn reporting `output_tokens 1523` with `reasoning_output_tokens 1516`
+*     answered with about seven tokens of text — and `parseCodexUsageRecord` holds that as an
+*     invariant. The canonical `llm_call` carries no reasoning class, so the count is not
+*     forwarded to {@link buildLlmCall}. Canonical output totals already include reasoning.
+*
+* A counter no report carried stays absent, because a zero would claim the provider measured none.
+*/
+function harnessUsageLlmCall(reports, agentRunName) {
+	let inputTokens = 0;
+	let outputTokens = 0;
+	let readTokens;
+	let writeTokens;
+	for (const report of reports) {
+		inputTokens += report.input;
+		outputTokens += report.output;
+		if (report.cachedInput !== void 0) readTokens = (readTokens ?? 0) + report.cachedInput;
+		if (report.cacheWriteInput !== void 0) writeTokens = (writeTokens ?? 0) + report.cacheWriteInput;
+	}
+	const promptCache = {};
+	if (readTokens !== void 0) promptCache.readTokens = readTokens;
+	if (writeTokens !== void 0) promptCache.writeTokens = writeTokens;
+	return buildLlmCall({
+		inputTokens,
+		outputTokens,
+		...Object.keys(promptCache).length > 0 ? { promptCache } : {}
+	}, agentRunName);
+}
+/**
+* Sum the token usage + USD cost of a sandbox turn's events — the one honest way to meter an
+* `openSandboxRun` cell. Folds a {@link SandboxUsageLedger} over the stream, so it reads usage off
+* EVERY backend event shape — the canonical events plus a harness that reports usage only in its
+* own event — and a `runProfileMatrix` dispatch can report it to `ctx.cost`:
+*
+*     receipt: (turn) => {
+*       const u = sumSandboxUsage(turn.events)
+*       return { model, inputTokens: u.input, outputTokens: u.output,
+*         ...(u.tokensKnown === false ? { usageUnknown: true } : {}),
+*         ...(u.usdKnown !== false && u.costUsd > 0 ? { actualCostUsd: u.costUsd } : {}),
+*         ...(u.usdKnown === false ? { costUnknown: true } : {}),
+*         ...(u.estimatedCostUsd !== undefined ? { estimatedCostUsd: u.estimatedCostUsd } : {}) }
+*     }
+*
+* Without this a cell reads `{tokens:0, cost:0}` and the backend-integrity guard correctly aborts the
+* matrix as a stub. `agentRunName` is the fallback model label for cost-only events (default `'agent'`).
+*
+* Pure by contract, like the ledger it folds: it never throws. A harness receipt the ledger cannot
+* read leaves the result at `tokensKnown: false` with `tokensUnknownReason` carrying the decode
+* message — an unreadable receipt is a different fact from a turn that reported no usage, and a
+* post-hoc reader that threw would lose the whole failed turn it exists to report.
+*/
+function sumSandboxUsage(events, agentRunName = "agent") {
+	let input = 0;
+	let output = 0;
+	let costUsd = 0;
+	let estimatedCostUsd = 0;
+	let sawEstimate = false;
+	let sawCall = false;
+	let sawTokenReceipt = false;
+	let tokensKnown = true;
+	let usdKnown = true;
+	let unreadable;
+	const ledger = createSandboxUsageLedger();
+	const credit = (call) => {
+		sawCall = true;
+		sawTokenReceipt ||= call.tokensIn !== void 0 || call.tokensOut !== void 0;
+		input += call.tokensIn ?? 0;
+		output += call.tokensOut ?? 0;
+		costUsd += call.costUsd ?? 0;
+		if (call.tokensKnown === false) tokensKnown = false;
+		if (call.usdKnown === false) usdKnown = false;
+		unreadable ??= call.tokensUnknownReason;
+		if (call.estimatedCostUsd !== void 0) {
+			estimatedCostUsd += call.estimatedCostUsd;
+			sawEstimate = true;
+		}
+	};
+	for (const ev of events) {
+		const call = ledger.observe(ev, agentRunName);
+		if (call) credit(call);
+	}
+	const harnessCall = ledger.settleTurn(agentRunName);
+	if (harnessCall) credit(harnessCall);
+	return {
+		input,
+		output,
+		costUsd,
+		...sawTokenReceipt && tokensKnown ? {} : { tokensKnown: false },
+		...sawCall && usdKnown ? {} : { usdKnown: false },
+		...sawEstimate ? { estimatedCostUsd } : {},
+		...unreadable === void 0 ? {} : { tokensUnknownReason: unreadable }
+	};
+}
+function usageReceiptData(envelope, usage = {}) {
+	const merged = {
+		...usage,
+		...envelope
+	};
+	for (const aliases of [
+		[
+			"tokensIn",
+			"inputTokens",
+			"prompt_tokens"
+		],
+		[
+			"tokensOut",
+			"outputTokens",
+			"completion_tokens"
+		],
+		[
+			"costUsd",
+			"totalCostUsd",
+			"cost_usd",
+			"cost"
+		],
+		["costProvenance", "cost_provenance"]
+	]) {
+		const key = aliases.find((alias) => envelope[alias] !== void 0);
+		if (key === void 0) continue;
+		for (const alias of aliases) delete merged[alias];
+		merged[key] = envelope[key];
+	}
+	for (const aliases of [["tokensKnown", "tokens_known"], [
+		"costKnown",
+		"cost_known",
+		"usdKnown",
+		"usd_known"
+	]]) {
+		const values = [usage, envelope].flatMap((receipt) => aliases.map((key) => receipt[key]).filter((value) => value !== void 0));
+		if (values.length > 0) merged[aliases[0]] = values.every((value) => value === true);
+	}
+	return merged;
+}
+function buildLlmCall(data, agentRunName) {
+	const tokensIn = pickFiniteNumber(data, [
+		"tokensIn",
+		"inputTokens",
+		"prompt_tokens"
+	]);
+	const outputTokens = pickFiniteNumber(data, [
+		"tokensOut",
+		"outputTokens",
+		"completion_tokens"
+	]);
+	const reasoningTokens = pickFiniteNumber(data, ["reasoningTokens"]);
+	const tokensOut = outputTokens ?? reasoningTokens;
+	const reportedCostUsd = pickFiniteNumber(data, [
+		"costUsd",
+		"totalCostUsd",
+		"cost_usd",
+		"cost"
+	]);
+	const explicitTokensKnown = data.tokensKnown ?? data.tokens_known;
+	const explicitCostKnown = data.costKnown ?? data.cost_known ?? data.usdKnown ?? data.usd_known;
+	const costProvenance = data.costProvenance ?? data.cost_provenance;
+	const explicitEstimate = pickFiniteNumber(data, ["estimatedCostUsd", "estimated_cost_usd"]);
+	const catalogEstimate = costProvenance === "catalog-estimate" ? explicitEstimate ?? reportedCostUsd : explicitEstimate;
+	const costUsd = costProvenance === "catalog-estimate" ? void 0 : reportedCostUsd;
+	const promptCache = readPromptCacheUsage(data);
+	const tokensKnown = explicitTokensKnown !== false && tokensIn !== void 0 && outputTokens !== void 0;
+	const usdKnown = explicitCostKnown !== false && costUsd !== void 0 && (costProvenance === void 0 || costProvenance === "provider-receipt" || costProvenance === "billing-receipt");
+	const tools = readOfferedTools(data.tools);
+	if (tokensIn === void 0 && tokensOut === void 0 && costUsd === void 0 && catalogEstimate === void 0 && promptCache === void 0 && tools === void 0 && explicitTokensKnown !== false && explicitCostKnown !== false) return;
+	const event = {
+		type: "llm_call",
+		model: typeof data.model === "string" && data.model.length > 0 ? data.model : agentRunName
+	};
+	if (tokensIn !== void 0) event.tokensIn = tokensIn;
+	if (tokensOut !== void 0) event.tokensOut = tokensOut;
+	if (!tokensKnown) event.tokensKnown = false;
+	if (costUsd !== void 0) event.costUsd = costUsd;
+	if (!usdKnown) event.usdKnown = false;
+	if (catalogEstimate !== void 0) event.estimatedCostUsd = catalogEstimate;
+	if (promptCache !== void 0) event.promptCache = promptCache;
+	if (tools !== void 0) event.tools = tools;
+	return event;
+}
+/** `data.tools`, when it is a non-empty array of non-empty tool-name strings. Anything else
+*  (absent, empty, wrong element type) is treated as "the producer did not report its offered
+*  set" — never a placeholder empty list, which would read as "offered zero tools" downstream. */
+function readOfferedTools(value) {
+	if (!Array.isArray(value) || value.length === 0) return void 0;
+	const names = value.filter((v) => typeof v === "string" && v.length > 0);
+	return names.length === value.length ? names : void 0;
+}
+/**
+* Every wire spelling of a prompt-cache READ counter, in precedence order: the canonical name
+* first, then the spellings observed on the paths that reach this extractor — the sandbox terminal
+* `tokenUsage` record, the cli-bridge OpenAI-compatible usage object (which normalizes every
+* backend to Anthropic's `cache_read_input_tokens`), Anthropic verbatim, OpenAI's
+* `prompt_tokens_details.cached_tokens`, and DeepSeek's `prompt_cache_hit_tokens`.
+*/
+const PROMPT_CACHE_READ_KEYS = [
+	"readTokens",
+	"read_tokens",
+	"cacheReadInputTokens",
+	"cache_read_input_tokens",
+	"cacheRead",
+	"cache_read",
+	"cachedInputTokens",
+	"cachedTokens",
+	"cached_tokens",
+	"prompt_cache_hit_tokens"
+];
+/**
+* Every wire spelling of a prompt-cache WRITE counter. OpenAI reports no write counter at all, so
+* an OpenAI-shaped usage record matches nothing here and the write stays absent — which is the
+* point: absent is not zero.
+*/
+const PROMPT_CACHE_WRITE_KEYS = [
+	"writeTokens",
+	"write_tokens",
+	"cacheWriteInputTokens",
+	"cache_write_input_tokens",
+	"cacheCreationInputTokens",
+	"cache_creation_input_tokens",
+	"cacheWrite",
+	"cache_write"
+];
+const PROMPT_CACHE_MISS_KEYS = [
+	"missTokens",
+	"miss_tokens",
+	"prompt_cache_miss_tokens"
+];
+const PROMPT_CACHE_SAVINGS_KEYS = ["readSavingsUsd", "read_savings_usd"];
+/**
+* Read the provider's own prompt-cache accounting off one usage-bearing event payload, in the
+* `PromptCacheUsage` vocabulary the router, driver, and chat-client paths already speak.
+*
+* Two sources, one record. A payload that already carries a `promptCache` / `prompt_cache` object
+* is forwarded VERBATIM — those fields are the provider's own report, and an unrecognized one must
+* stay visible rather than be bucketed away. On top of that, flat provider counters are translated
+* to the canonical names, filling only the names the verbatim object did not already define.
+*
+* A counter the payload does not carry is left out. Defaulting it to zero would assert the provider
+* measured no cache, which is a different fact from a provider that reported nothing — and it is
+* the fact the budget reads to decide whether its charge is a measurement or a bound.
+*/
+function readPromptCacheUsage(data) {
+	const declared = finiteMetadata(data.promptCache ?? data.prompt_cache);
+	const nested = recordValue(data.promptCache) ?? recordValue(data.prompt_cache);
+	const sources = [
+		nested,
+		data,
+		recordValue(data.prompt_tokens_details)
+	].filter((s) => s !== void 0);
+	const canonical = {};
+	const readTokens = pickTokenCount(sources, PROMPT_CACHE_READ_KEYS);
+	const writeTokens = pickTokenCount(sources, PROMPT_CACHE_WRITE_KEYS);
+	const missTokens = pickTokenCount(sources, PROMPT_CACHE_MISS_KEYS);
+	const readSavingsUsd = pickNonNegativeNumber(sources, PROMPT_CACHE_SAVINGS_KEYS);
+	const status = nested !== void 0 && typeof nested.status === "string" ? nested.status : void 0;
+	if (readTokens !== void 0) canonical.readTokens = readTokens;
+	if (writeTokens !== void 0) canonical.writeTokens = writeTokens;
+	if (missTokens !== void 0) canonical.missTokens = missTokens;
+	if (readSavingsUsd !== void 0) canonical.readSavingsUsd = readSavingsUsd;
+	if (status !== void 0) canonical.status = status;
+	const merged = {
+		...canonical,
+		...declared
+	};
+	return Object.keys(merged).length > 0 ? merged : void 0;
+}
+function pickTokenCount(sources, keys) {
+	for (const key of keys) for (const source of sources) {
+		const value = source[key];
+		if (typeof value === "number" && Number.isSafeInteger(value) && value >= 0) return value;
+	}
+}
+function pickNonNegativeNumber(sources, keys) {
+	for (const key of keys) for (const source of sources) {
+		const value = source[key];
+		if (typeof value === "number" && Number.isFinite(value) && value >= 0) return value;
+	}
+}
+function finiteMetadata(value) {
+	if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
+	const result = {};
+	for (const [key, entry] of Object.entries(value)) if (typeof entry === "number" && Number.isFinite(entry) || typeof entry === "string") result[key] = entry;
+	return Object.keys(result).length > 0 ? result : void 0;
+}
+function pickFiniteNumber(data, keys) {
+	for (const key of keys) {
+		const value = data[key];
+		if (typeof value === "number" && Number.isFinite(value)) return value;
+	}
+}
+/**
+* Collect one turn's events, keeping only the newest snapshot of each streamed text or
+* reasoning part.
+*
+* opencode sends `message.part.updated` once per token, and every frame carries the part's
+* whole cumulative text, so keeping every frame holds O(L²) bytes per turn: two concurrent
+* audit workflows took the platform API from 459 MB to an OOM at 1.95 GB in 11 minutes.
+* A snapshot (a frame whose part carries `text`) whose text extends the previous snapshot
+* of the same part replaces it and moves to the newest position, which is the rule the
+* Sandbox SDK's text collectors already apply, so the collected text is unchanged. The kept
+* frame drops its `delta`, because its text already holds every earlier increment and a
+* reader that joins `delta ?? part.text` across frames would otherwise read only the last
+* one. Delta-only frames and every other event are kept as they arrived.
+*/
+function createSandboxTurnEventCollector() {
+	const slots = [];
+	const snapshots = /* @__PURE__ */ new Map();
+	return {
+		push(event) {
+			const snapshot = partSnapshot(event);
+			if (!snapshot) {
+				slots.push(event);
+				return;
+			}
+			const previous = snapshots.get(snapshot.key);
+			const extends_ = previous !== void 0 && snapshot.text.startsWith(previous.text);
+			if (extends_) slots[previous.at] = void 0;
+			snapshots.set(snapshot.key, {
+				at: slots.length,
+				text: snapshot.text
+			});
+			slots.push(extends_ ? withoutDelta(event) : event);
+		},
+		events() {
+			return slots.filter((event) => event !== void 0);
+		}
+	};
+}
+function partSnapshot(event) {
+	if (event?.type !== "message.part.updated") return void 0;
+	const data = asRecord(event.data);
+	const part = asRecord(data?.part) ?? asRecord(asRecord(data?.properties)?.part);
+	if (!part || typeof part.id !== "string") return void 0;
+	if (part.type !== "text" && part.type !== "reasoning" && part.type !== "thinking") return void 0;
+	const text = typeof part.text === "string" ? part.text : typeof part.content === "string" ? part.content : void 0;
+	return text === void 0 ? void 0 : {
+		key: `${part.type}:${part.id}`,
+		text
+	};
+}
+function withoutDelta(event) {
+	const data = asRecord(event.data);
+	if (!data || !("delta" in data)) return event;
+	const { delta: _delta, ...rest } = data;
+	return {
+		...event,
+		data: rest
+	};
+}
+function asRecord(value) {
+	return value !== null && typeof value === "object" ? value : void 0;
+}
+// src/runtime/timestamps.ts
+const validTimestamp = "2026-01-01T00:00:00.000Z";
+/** Validate a timestamp with the public runtime envelope contract. */
+function assertRuntimeTimestamp(value, label) {
+	try {
+		RuntimeEventEnvelopeSchema.parse({
+			runId: "runtime",
+			eventId: "event",
+			sequence: 0,
+			occurredAt: value,
+			receivedAt: validTimestamp,
+			event: {
+				type: "status",
+				status: "processing"
+			}
+		});
+	} catch (error) {
+		throw new Error(`${label} must be a valid ISO timestamp`, { cause: error });
+	}
+}
+// src/runtime/sandbox-transport-events.ts
+/** Canonical Sandbox/provider wire-envelope decoding and transport identity. */
+const CANONICAL_STREAM_EVENT_TYPES = /* @__PURE__ */ new Set([
+	"child-task",
+	"message.part.updated",
+	"tool-heartbeat",
+	"tool-slow",
+	"model-processing",
+	"status",
+	"warning",
+	"raw",
+	"session.updated",
+	"interaction",
+	"interaction.cancel",
+	"plan.submitted"
+]);
+/** Decode one known Agent Interface event from a Sandbox event. */
+function canonicalStreamEventFromSandboxEvent(event) {
+	if (!event || typeof event !== "object") return void 0;
+	const type = String(event.type ?? "");
+	const data = event.data && typeof event.data === "object" ? event.data : {};
+	const normalized = data.normalized;
+	if (normalized === void 0 && !CANONICAL_STREAM_EVENT_TYPES.has(type)) return void 0;
+	return parseCanonicalTransportEvent(type, data, normalized, "sandbox");
+}
+/**
+* Transport type whose payload is the harness's OWN event, passed through verbatim.
+*
+* A `raw` payload names a harness-native type from a vocabulary the canonical schema does not
+* define (codex emits `thread.started` / `turn.started` / `turn.completed`). The transport type is
+* therefore the only canonical statement such an event makes, and its payload must never be read
+* as a canonical type: the mismatch guard below exists to catch a producer that MISLABELS a
+* canonical event, which a harness-native payload cannot do. A payload that does satisfy the
+* canonical `raw` shape (`backend` + `event`) still parses; anything else is not a canonical
+* event, and the caller reads it off the transport event instead.
+*/
+const harnessNativePayloadType = "raw";
+/** Parse canonical payload fields without treating transport identity as event data. */
+function parseCanonicalTransportEvent(type, data, normalized, source) {
+	if (!isRecord(data)) throw new Error(`${source} emitted a canonical event without an object payload`);
+	const outerType = String(type ?? "");
+	const harnessNative = outerType === harnessNativePayloadType;
+	if (normalized !== void 0) {
+		if (!harnessNative && typeof normalized === "object" && normalized !== null && "type" in normalized && typeof normalized.type === "string" && normalized.type !== outerType) throw new Error(`${source} canonical event type "${normalized.type}" does not match transport type "${outerType}"`);
+		const candidate = CanonicalStreamEventSchema.safeParse(normalized);
+		if (!candidate.success) {
+			if (harnessNative) return void 0;
+			throw new Error(`${source} emitted an invalid normalized canonical event`, { cause: candidate.error });
+		}
+		return candidate.data;
+	}
+	const { type: embeddedType, eventId: _eventId, cursor: _cursor, sequence: _sequence, occurredAt: _occurredAt, normalized: _normalized, ...payload } = data;
+	if (!harnessNative && embeddedType !== void 0 && embeddedType !== outerType) throw new Error(`${source} canonical event type "${String(embeddedType)}" does not match transport type "${outerType}"`);
+	const candidate = CanonicalStreamEventSchema.safeParse({
+		...payload,
+		type: outerType
+	});
+	return candidate.success ? candidate.data : void 0;
+}
+/** Extract shared event identity without privileging one provider wire shape. */
+function extractTransportEventIdentity(event) {
+	const record = isRecord(event) ? event : {};
+	const data = isRecord(record.data) ? record.data : {};
+	const providerEvent = isRecord(record.providerEvent) ? record.providerEvent : {};
+	const providerData = isRecord(providerEvent.data) ? providerEvent.data : {};
+	const eventId = canonicalEventId(record, data, providerEvent, providerData);
+	const cursor = stableString(record.cursor ?? data.cursor ?? providerEvent.cursor ?? providerData.cursor);
+	const sequence = optionalSequence(record.sequence ?? data.sequence ?? providerEvent.sequence ?? providerData.sequence);
+	const occurredAt = optionalTimestamp(record.occurredAt ?? data.occurredAt ?? providerEvent.occurredAt ?? providerData.occurredAt);
+	return {
+		...eventId === void 0 ? {} : { eventId },
+		...cursor === void 0 ? {} : { cursor },
+		...sequence === void 0 ? {} : { sequence },
+		...occurredAt === void 0 ? {} : { occurredAt }
+	};
+}
+function canonicalEventId(record, data, providerEvent, providerData) {
+	const present = [
+		["data.eventId", data.eventId],
+		["providerEvent.eventId", providerEvent.eventId],
+		["providerData.eventId", providerData.eventId],
+		["record.eventId", record.eventId]
+	].filter(([, value]) => value !== void 0);
+	if (present.length === 0) return stableString(record.id ?? providerEvent.id);
+	const normalized = present.map(([source, value]) => {
+		const eventId = stableString(value);
+		if (eventId === void 0) throw new Error(`transport event ${source} must be a stable string`);
+		return {
+			source,
+			eventId
+		};
+	});
+	const first = normalized[0];
+	if (normalized.some((candidate) => candidate.eventId !== first.eventId)) throw new Error("transport event canonical identities disagree");
+	return first.eventId;
+}
+function stableString(value) {
+	return typeof value === "string" && value.length > 0 && value.trim() === value ? value : void 0;
+}
+function finiteNonNegativeInteger(value) {
+	return typeof value === "number" && Number.isSafeInteger(value) && value >= 0 ? value : void 0;
+}
+function optionalSequence(value) {
+	if (value === void 0) return void 0;
+	if (finiteNonNegativeInteger(value) === void 0) throw new Error("transport event sequence must be a non-negative safe integer");
+	return value;
+}
+function optionalTimestamp(value) {
+	if (value === void 0) return void 0;
+	assertRuntimeTimestamp(value, "occurredAt");
+	return value;
+}
+// src/runtime/sandbox-executor-output.ts
+/** Streamed and terminal Sandbox executor output, using one tool-part projector. */
+/**
+* Fresh per-turn {@link SandboxToolPartState} for {@link mapSandboxToolEvent} — an
+* empty call-status map so each turn projects tool frames independently.
+*
+* @experimental
+*/
+function createSandboxToolPartState() {
+	return {
+		statusByCall: /* @__PURE__ */ new Map(),
+		seq: 0
+	};
+}
+/** Statuses that settle one tool call as a failure. A failed tool call stays a tool result:
+*  the run's terminal state comes from the public Sandbox outcome tracker, never from here. */
+const TERMINAL_FAILURE = /^(error|errored|failed|failure|cancelled|canceled|timeout|timed_out)$/i;
+/**
+* Project one `SandboxEvent` onto the `tool_call` / `tool_result` variants of
+* `RuntimeStreamEvent` — the tool-part projection `mapSandboxEvent`
+* deliberately does NOT perform. Opt-in and additive: `mapSandboxEvent`'s
+* default vocabulary (text/reasoning deltas + `llm_call`) is unchanged;
+* consumers that need the tool surface (chat UIs rendering tool activity)
+* compose this projector alongside it — `streamAgentTurn` does exactly that
+* under its `preserveToolParts` option.
+*
+* Handled shapes (observed on the opencode / claude-code sandbox backends):
+*   - `message.part.updated` with `part.type === 'tool'` — stateful: a
+*     `tool_call` on the call id's first frame (args from `state.input` or
+*     `state.metadata.input`), a `tool_result` when the status transitions to
+*     `completed` (result from `state.output` / `metadata.output`) or to a
+*     terminal failure (result is `{ error, status, output? }` — the error
+*     surfaced in-band, never dropped).
+*   - bare `tool*` event types (`tool.call`, `tool_result`, …) — stateless:
+*     `*result*` types project to `tool_result`, the rest to `tool_call`.
+*   - codex `raw` events whose inner `item.started` / `item.updated` /
+*     `item.completed` carries a command, MCP, collaboration, web search or
+*     file change item — stateful on the item id, like a tool part. Other raw
+*     events, including opencode's raw `tool_use` echoes, project nothing.
+*
+* Returns `[]` for every non-tool event.
+*
+* @experimental
+*/
+function mapSandboxToolEvent(event, state) {
+	if (!event || typeof event !== "object") return [];
+	const type = String(event.type ?? "");
+	const data = event.data && typeof event.data === "object" ? event.data : {};
+	if (type === "message.part.updated") {
+		const part = data.part && typeof data.part === "object" ? data.part : {};
+		if (String(part.type ?? "") !== "tool") return [];
+		return projectToolPart(part, state, typeof event.id === "string" ? event.id : void 0);
+	}
+	if (type === "raw") return projectCodexItem(data, state);
+	if (CANONICAL_STREAM_EVENT_TYPES.has(type)) return [];
+	if (type.includes("tool")) {
+		const callId = pickString(data, [
+			"toolCallId",
+			"tool_use_id",
+			"id"
+		]) ?? (typeof event.id === "string" ? event.id : void 0) ?? `sandbox-tool-${++state.seq}`;
+		const toolName = pickString(data, [
+			"name",
+			"toolName",
+			"tool"
+		]) ?? "sandbox_tool";
+		if (type.includes("result")) return [{
+			type: "tool_result",
+			toolName,
+			toolCallId: callId,
+			result: data.output ?? data.result ?? data.content ?? data
+		}];
+		return [{
+			type: "tool_call",
+			toolName,
+			toolCallId: callId,
+			args: data.input ?? data.args ?? {}
+		}];
+	}
+	return [];
+}
+function projectToolPart(part, state, eventId) {
+	const callId = pickString(part, [
+		"callID",
+		"callId",
+		"toolCallId",
+		"id"
+	]) ?? eventId ?? `sandbox-tool-${++state.seq}`;
+	const toolName = pickString(part, [
+		"tool",
+		"toolName",
+		"name"
+	]) ?? "sandbox_tool";
+	const toolState = part.state && typeof part.state === "object" ? part.state : {};
+	const metadata = toolState.metadata && typeof toolState.metadata === "object" ? toolState.metadata : {};
+	const status = pickString(toolState, ["status"]) ?? "updated";
+	const previous = state.statusByCall.get(callId);
+	if (previous === "completed" || previous !== void 0 && TERMINAL_FAILURE.test(previous)) return [];
+	const out = [];
+	if (previous === void 0) out.push({
+		type: "tool_call",
+		toolName,
+		toolCallId: callId,
+		args: toolState.input ?? metadata.input ?? {}
+	});
+	state.statusByCall.set(callId, status);
+	if (status === "completed") out.push({
+		type: "tool_result",
+		toolName,
+		toolCallId: callId,
+		result: toolState.output ?? metadata.output ?? ""
+	});
+	else if (TERMINAL_FAILURE.test(status)) {
+		const message = pickString(toolState, ["error", "message"]) ?? pickString(metadata, ["error", "message"]) ?? `sandbox tool ended with status ${status}`;
+		const output = toolState.output ?? metadata.output;
+		out.push({
+			type: "tool_result",
+			toolName,
+			toolCallId: callId,
+			result: {
+				error: message,
+				status,
+				...output !== void 0 ? { output } : {}
+			}
+		});
+	}
+	return out;
+}
+/** Codex item types that are tool calls. Reasoning, messages and todo lists are not. */
+const CODEX_TOOL_ITEMS = /* @__PURE__ */ new Set([
+	"command_execution",
+	"mcp_tool_call",
+	"collab_tool_call",
+	"web_search",
+	"file_change"
+]);
+/** Item fields that describe the call's progress or outcome rather than what it was asked to do. */
+const CODEX_ITEM_OUTCOME_FIELDS = /* @__PURE__ */ new Set([
+	"id",
+	"type",
+	"status",
+	"result",
+	"error",
+	"aggregated_output",
+	"exit_code"
+]);
+/**
+* Project a codex `item.started` / `item.updated` / `item.completed` tool item through the same
+* per-call state as a tool part, keyed on the item id: one `tool_call` on its first frame and one
+* `tool_result` when it completes. Tool names follow Eval's codex intake: `server/tool` for MCP.
+*/
+function projectCodexItem(data, state) {
+	if (data.backend !== "codex" || !data.event || typeof data.event !== "object") return [];
+	const inner = data.event;
+	const phase = inner.type;
+	if (phase !== "item.started" && phase !== "item.updated" && phase !== "item.completed") return [];
+	if (!inner.item || typeof inner.item !== "object") return [];
+	const item = inner.item;
+	const itemType = pickString(item, ["type"]);
+	if (itemType === void 0 || !CODEX_TOOL_ITEMS.has(itemType)) return [];
+	const error = item.error && typeof item.error === "object" ? pickString(item.error, ["message"]) ?? `${itemType} failed` : void 0;
+	const failed = item.status === "failed" || error !== void 0 || itemType === "command_execution" && typeof item.exit_code === "number" && item.exit_code !== 0;
+	const status = phase !== "item.completed" ? "running" : failed ? "failed" : "completed";
+	const input = Object.fromEntries(Object.entries(item).filter(([key]) => !CODEX_ITEM_OUTCOME_FIELDS.has(key)));
+	const output = item.result ?? item.aggregated_output ?? item.changes;
+	return projectToolPart({
+		...typeof item.id === "string" ? { callID: item.id } : {},
+		tool: codexToolName(itemType, item),
+		state: {
+			status,
+			input,
+			...output === void 0 || output === null ? {} : { output },
+			...status === "failed" ? { error: error ?? `${itemType} failed` } : {}
+		}
+	}, state, void 0);
+}
+function codexToolName(itemType, item) {
+	if (itemType === "mcp_tool_call") {
+		const name = [pickString(item, ["server"]), pickString(item, ["tool"])].filter((part) => part !== void 0).join("/");
+		return name === "" ? "mcp" : name;
+	}
+	if (itemType === "collab_tool_call") return pickString(item, ["tool"]) ?? "subagent";
+	if (itemType === "web_search" || itemType === "file_change") return itemType;
+	return pickString(item, ["name"]) ?? itemType;
+}
+function pickString(data, keys) {
+	for (const key of keys) {
+		const value = data[key];
+		if (typeof value === "string" && value.length > 0) return value;
+	}
+}
+/**
+* Project one `SandboxEvent` onto the `RuntimeStreamEvent` chat-UX vocabulary,
+* for runtimes that bridge a sandbox `streamPrompt` into the
+* `AgentRuntime.act` streaming contract. Returns `undefined` for events that
+* have no faithful projection — the raw stream is preserved separately for the
+* `OutputAdapter`, so an unmapped event never loses data.
+*
+* Mapped (the task-optional incremental variants — no synthesized task
+* lifecycle, no guessed tool-part shapes):
+*   - `message.part.updated` text part → `text_delta`
+*   - `message.part.updated` reasoning/thinking part → `reasoning_delta`
+*   - cost-bearing events → `llm_call` (shared with the ledger extractor)
+*
+* Tool parts are deliberately NOT mapped here (unchanged default) — compose
+* {@link mapSandboxToolEvent} alongside when a consumer needs them.
+*
+* The opencode backend emits incremental text as
+* `{ type: 'message.part.updated', data: { part: { type, text }, delta } }`;
+* `delta` is the increment, `part.text` the running accumulation.
+*/
+function mapSandboxEvent(event, opts = {}) {
+	if (!event || typeof event !== "object") return void 0;
+	const type = String(event.type ?? "");
+	const data = event.data && typeof event.data === "object" ? event.data : {};
+	if (type === "message.part.updated") {
+		const part = data.part && typeof data.part === "object" ? data.part : {};
+		const partType = String(part.type ?? "");
+		const text = (typeof data.delta === "string" ? data.delta : void 0) ?? (typeof part.text === "string" ? part.text : void 0);
+		if (text === void 0) return void 0;
+		if (partType === "text") return {
+			type: "text_delta",
+			text
+		};
+		if (partType === "reasoning" || partType === "thinking") return {
+			type: "reasoning_delta",
+			text
+		};
+		return;
+	}
+	return extractLlmCallEvent(event, opts.agentRunName ?? "agent");
+}
+/**
+* Project one `SandboxEvent` onto Runtime's executor progress vocabulary: incremental text and
+* reasoning, tool calls and results, and an interaction request. It composes the existing
+* projections ({@link mapSandboxEvent}, {@link mapSandboxToolEvent}, and the canonical Agent
+* Interface decode) so every sandbox-shaped executor publishes live output through one reader.
+* Usage-bearing events project to nothing here — accounting stays on the `tokens`/`cost`
+* channels.
+*
+* Pass one {@link SandboxToolPartState} per turn so a multi-frame tool call yields one call and
+* at most one result.
+*
+* @experimental
+*/
+function sandboxProgressEvents(event, state) {
+	const canonical = canonicalStreamEventFromSandboxEvent(event);
+	if (canonical?.type === "interaction") return [{
+		kind: "interaction",
+		request: canonical.request
+	}];
+	if (canonical?.type === "child-task") return [{
+		kind: "child_task",
+		event: canonical
+	}];
+	const tools = mapSandboxToolEvent(event, state).map((projected) => projected.type === "tool_call" ? {
+		kind: "tool_call",
+		toolName: projected.toolName,
+		...projected.toolCallId === void 0 ? {} : { toolCallId: projected.toolCallId },
+		...projected.args === void 0 ? {} : { args: projected.args }
+	} : {
+		kind: "tool_result",
+		toolName: projected.toolName,
+		...projected.toolCallId === void 0 ? {} : { toolCallId: projected.toolCallId },
+		...projected.result === void 0 ? {} : { result: projected.result }
+	});
+	if (tools.length > 0) return tools;
+	const mapped = mapSandboxEvent(event);
+	if (mapped?.type === "text_delta") return [{
+		kind: "text_delta",
+		text: mapped.text
+	}];
+	if (mapped?.type === "reasoning_delta") return [{
+		kind: "reasoning_delta",
+		text: mapped.text
+	}];
+	return [];
+}
+/** Project the complete Sandbox event stream into the standard executor result shape. */
+function sandboxLeafOutputFromEvents(events) {
+	const content = collectAgentFinalMessageText(events) ?? collectAgentResponseText(events);
+	const toolCalls = sandboxToolCalls(events);
+	const servedBackend = lastServedBackend(events);
+	return {
+		events,
+		content,
+		output: sandboxOutputMarker(content, events.some(carriesText)),
+		...servedBackend === void 0 ? {} : { servedBackend },
+		...toolCalls.length === 0 ? {} : { toolCalls }
+	};
+}
+/**
+* Classify observed text into the explicit output marker. `sawTextEvent` says whether the stream
+* carried a text-bearing event at all, which is what separates a box that answered nothing from a
+* box whose answer was never observed.
+*/
+function sandboxOutputMarker(content, sawTextEvent = content !== void 0) {
+	if (content !== void 0 && content.length > 0) return {
+		kind: "text",
+		bytes: Buffer.byteLength(content, "utf8")
+	};
+	return sawTextEvent ? { kind: "empty" } : { kind: "absent" };
+}
+/** True when the event carries a text field a turn's answer could come from, empty or not. */
+function carriesText(event) {
+	if (!event || typeof event !== "object") return false;
+	const data = event.data && typeof event.data === "object" ? event.data : {};
+	if (typeof data.finalText === "string" || typeof data.text === "string") return true;
+	if (typeof data.delta === "string") return true;
+	const part = data.part && typeof data.part === "object" ? data.part : void 0;
+	return part !== void 0 && part.type === "text" && typeof part.text === "string";
+}
+/** The last served identity the platform reported across a turn's events, or `undefined`. */
+function lastServedBackend(events) {
+	let served;
+	for (const event of events) {
+		const next = sandboxEventServedBackend(event);
+		if (next !== void 0) served = next;
+	}
+	return served;
+}
+function sandboxToolCalls(events) {
+	const state = createSandboxToolPartState();
+	return events.flatMap((event) => mapSandboxToolEvent(event, state).flatMap((projected) => projected.type === "tool_call" ? [{
+		...projected.toolCallId === void 0 ? {} : { id: projected.toolCallId },
+		name: projected.toolName,
+		arguments: projected.args ?? {}
+	}] : []));
+}
+/** Read the final text off a terminal sandbox event, when present. */
+function terminalTextFromSandboxEvent(event) {
+	if (!event || typeof event !== "object") return void 0;
+	if (!isSandboxTerminalEvent(String(event.type ?? ""))) return void 0;
+	const data = event.data && typeof event.data === "object" ? event.data : {};
+	for (const key of [
+		"finalText",
+		"text",
+		"response",
+		"content"
+	]) {
+		const value = data[key];
+		if (typeof value === "string") return value;
+	}
+}
+// src/runtime/supervise/spend-validation.ts
+/** Reject malformed ceilings before they can mint capacity through negative reservations. */
+function assertValidBudget(budget, label = "budget") {
+	const safeInteger = (value, field) => {
+		if (!Number.isSafeInteger(value) || value < 0) throw new Error(`${label}.${field} must be a non-negative safe integer`);
+	};
+	const finiteNonNegative = (value, field) => {
+		if (!Number.isFinite(value) || value < 0) throw new Error(`${label}.${field} must be a non-negative finite number`);
+	};
+	assertResources(budget.resources, "limit", `${label}.resources`);
+	if (budget.maxIterations !== void 0) safeInteger(budget.maxIterations, "maxIterations");
+	if (budget.maxTokens !== void 0) safeInteger(budget.maxTokens, "maxTokens");
+	if (budget.maxUsd !== void 0) finiteNonNegative(budget.maxUsd, "maxUsd");
+	if (budget.deadlineMs !== void 0) finiteNonNegative(budget.deadlineMs, "deadlineMs");
+}
+function assertValidSpend(spend, label) {
+	assertResources(spend.resources, "amount", `${label}.resources`);
+	if (!Number.isSafeInteger(spend.iterations) || spend.iterations < 0) throw new Error(`${label}.iterations must be a non-negative safe integer`);
+	for (const [field, value] of [
+		["input", spend.tokens.input],
+		["output", spend.tokens.output],
+		["freshInput", spend.tokens.freshInput],
+		["cacheRead", spend.tokens.cacheRead],
+		["cacheWrite", spend.tokens.cacheWrite]
+	]) {
+		if (value === void 0) continue;
+		if (!Number.isSafeInteger(value) || value < 0) throw new Error(`${label}.tokens.${field} must be a non-negative safe integer`);
+	}
+	for (const [field, value] of [["tokensKnown", spend.tokens.tokensKnown], ["cacheBreakdownKnown", spend.tokens.cacheBreakdownKnown]]) if (value !== void 0 && value !== false) throw new Error(`${label}.tokens.${field} must be false when present`);
+	const { freshInput, cacheRead, cacheWrite } = spend.tokens;
+	if (freshInput !== void 0 && cacheRead !== void 0 && cacheWrite !== void 0) {
+		const classified = freshInput + cacheRead + cacheWrite;
+		if (spend.tokens.cacheBreakdownKnown !== false) {
+			if (classified !== spend.tokens.input) throw new Error(`${label}.tokens cache classes must sum to input`);
+		} else if (classified > spend.tokens.input) throw new Error(`${label}.tokens cache classes must not exceed input`);
+	}
+	for (const [field, value] of [["usd", spend.usd], ["ms", spend.ms]]) if (!Number.isFinite(value) || value < 0) throw new Error(`${label}.${field} must be a non-negative finite number`);
+	if (spend.usdEstimated !== void 0) {
+		if (!Number.isFinite(spend.usdEstimated) || spend.usdEstimated < 0) throw new Error(`${label}.usdEstimated must be a non-negative finite number`);
+		if (spend.usdEstimated > spend.usd) throw new Error(`${label}.usdEstimated must not exceed ${label}.usd`);
+		if (spend.usdKnown !== false) throw new Error(`${label}.usdEstimated requires ${label}.usdKnown false`);
+	}
+}
+// src/runtime/supervise/budget-ledger.ts
+/**
+* The balances of one conserved budget pool, and the arithmetic that moves them. `createBudgetPool`
+* (`./budget`) owns tickets, the wait queue and the public contract; this module owns the numbers:
+* `total ≡ free + reserved + committed` per channel, the taint flags that say a balance is a
+* ceiling rather than a measurement, and the named-resource states.
+*/
+function openBudgetLedger(root, runStartedAtMs) {
+	return {
+		tokensCapped: root.maxTokens !== void 0,
+		iterationsCapped: root.maxIterations !== void 0,
+		usdCapped: root.maxUsd !== void 0,
+		absoluteDeadlineMs: root.deadlineMs === void 0 ? 0 : runStartedAtMs + root.deadlineMs,
+		resources: new Map(Object.entries(root.resources ?? {}).map(([name, value]) => [name, {
+			...value,
+			remaining: value.limit,
+			reserved: 0,
+			committed: 0,
+			known: true
+		}])),
+		freeTokens: root.maxTokens ?? 0,
+		reservedTokens: 0,
+		committedTokens: 0,
+		tokensTainted: false,
+		cacheBreakdownTainted: false,
+		freeUsd: root.maxUsd ?? 0,
+		reservedUsd: 0,
+		committedUsd: 0,
+		usdTainted: false,
+		usdMeasured: true,
+		freeIterations: root.maxIterations ?? 0,
+		reservedIterations: 0,
+		committedIterations: 0,
+		ownerSpent: {
+			iterations: 0,
+			tokens: zeroTokenUsage(),
+			usd: 0,
+			ms: 0
+		}
+	};
+}
+function ledgerValidateUnits(l, spend) {
+	for (const [name, value] of Object.entries(spend.resources ?? {})) {
+		const limit = l.resources.get(name);
+		if (limit && limit.unit !== value.unit) throw new Error(`resource ${name}: unit mismatch`);
+	}
+}
+/** Record that `spend` carried an unreported or unclassified channel. */
+function noteUnknowns(l, spend) {
+	if (spend.tokensKnown === false) l.tokensTainted = true;
+	if (!hasCompleteCacheBreakdown(spend.tokens)) l.cacheBreakdownTainted = true;
+	if (spend.usdKnown === false) l.usdMeasured = false;
+}
+/**
+* Commit named-resource spend and classify it. `allocations` is the settling reservation's own
+* allocations, or `undefined` for spend holding no reservation (`observe`, restore). Unverifiable
+* usage is a `fault` (the remaining balance is consumed so admission closes); measured usage above
+* an allocation is `overspent`; without allocations, usage leaving a root limit overdrawn is
+* `rootExceeded`. A reservation within its own allocation is never charged with a root overdraw:
+* a negative balance at its settlement was caused, and reported, by earlier spend.
+*/
+function ledgerCommitResources(l, spend, allocations, requireAll = true) {
+	let fault;
+	let rootExceeded;
+	const overspent = [];
+	for (const [name, state] of l.resources) {
+		const value = spend.resources?.[name];
+		if (!requireAll && value === void 0) continue;
+		const allocation = allocations?.[name]?.limit ?? 0;
+		const amount = value?.amount ?? 0;
+		state.reserved -= allocation;
+		const committed = state.committed + amount;
+		const overflow = !Number.isSafeInteger(committed);
+		state.committed = Math.min(committed, Number.MAX_SAFE_INTEGER);
+		state.remaining = state.limit - state.reserved - state.committed;
+		if (value?.known !== true || overflow) {
+			state.known = false;
+			const retained = Math.max(0, state.remaining);
+			state.committed += retained;
+			state.remaining -= retained;
+			fault ??= overflow ? `resource ${name}: amount overflow under an enforced limit` : `resource ${name}: unknown usage under an enforced limit`;
+		} else if (allocations !== void 0) {
+			if (amount > allocation) overspent.push({
+				channel: `resource:${name}`,
+				reserved: allocation,
+				spent: amount
+			});
+		} else if (state.remaining < 0) rootExceeded ??= `resource ${name}: exceeded root limit ${state.limit}`;
+	}
+	return {
+		...fault ? { fault } : {},
+		overspent,
+		...rootExceeded ? { rootExceeded } : {}
+	};
+}
+/** Every channel `b` does not fit, measured against the free balance less `keep`. */
+function ledgerShortfalls(l, b, keep) {
+	const wantTokens = b.maxTokens ?? 0;
+	const wantUsd = b.maxUsd ?? 0;
+	const wantIterations = b.maxIterations ?? 0;
+	const shortfalls = [];
+	const short = (channel, requested, free, held, closedByUnknownSpend = false) => {
+		shortfalls.push({
+			channel,
+			requested,
+			free: closedByUnknownSpend ? 0 : Math.max(0, free),
+			...closedByUnknownSpend || held <= 0 ? {} : { held },
+			...closedByUnknownSpend ? { closedByUnknownSpend: true } : {}
+		});
+	};
+	for (const [name, state] of l.resources) {
+		const limit = b.resources[name].limit;
+		if (!state.known) short(`resource:${name}`, limit, 0, 0, true);
+		else if (limit > state.remaining) short(`resource:${name}`, limit, state.remaining, state.reserved);
+	}
+	if (l.usdCapped && l.usdTainted) short("usd", wantUsd, 0, 0, true);
+	const kept = (share = 0, spent) => Math.max(0, share - spent);
+	const tokensFree = l.freeTokens - kept(keep?.tokens, chargedTokens(l.ownerSpent.tokens));
+	const iterationsFree = l.freeIterations - kept(keep?.iterations, l.ownerSpent.iterations);
+	if (l.tokensCapped && wantTokens > tokensFree) short("tokens", wantTokens, tokensFree, l.reservedTokens);
+	if (l.iterationsCapped && wantIterations > iterationsFree) short("iterations", wantIterations, iterationsFree, l.reservedIterations);
+	const usdFree = l.freeUsd - kept(keep?.usd, l.ownerSpent.usd);
+	if (l.usdCapped && !l.usdTainted && wantUsd > usdFree) short("usd", wantUsd, usdFree, l.reservedUsd);
+	return shortfalls;
+}
+/** Move `b` from free to reserved. The caller has checked that it fits. */
+function ledgerTake(l, b) {
+	for (const [name, state] of l.resources) {
+		const amount = b.resources[name].limit;
+		state.remaining -= amount;
+		state.reserved += amount;
+	}
+	if (l.tokensCapped) {
+		l.freeTokens -= b.maxTokens ?? 0;
+		l.reservedTokens += b.maxTokens ?? 0;
+	}
+	if (l.iterationsCapped) {
+		l.freeIterations -= b.maxIterations ?? 0;
+		l.reservedIterations += b.maxIterations ?? 0;
+	}
+	l.freeUsd -= b.maxUsd ?? 0;
+	l.reservedUsd += b.maxUsd ?? 0;
+}
+/**
+* The overspends a settlement of `spent` against `held` decides, before any balance moves. An
+* OVERSPEND is measured spend above the reservation; unknown dollars under a dollar cap (a fault
+* the caller reports) are flagged `unknownUnderCap`. `usdBudgeted` is whether the child declared a
+* dollar ceiling: without `maxUsd` it reserved NO dollars, so under a capped root its dollars are
+* OBSERVED spend, committed and debited from `free` like `observe`d inference.
+*/
+function ledgerClassifyOverspend(l, held, usdBudgeted, spent, limits) {
+	const unknownUnderCap = l.usdCapped && spent.usdKnown === false;
+	const spentTokens = chargedTokens(spent.tokens);
+	const overspent = [];
+	const tokens = limits === void 0 ? held.tokens : limits.maxTokens;
+	const iterations = limits === void 0 ? held.iterations : limits.maxIterations;
+	if (tokens !== void 0 && spentTokens > tokens) overspent.push({
+		channel: "tokens",
+		reserved: tokens,
+		spent: spentTokens
+	});
+	if (iterations !== void 0 && spent.iterations > iterations) overspent.push({
+		channel: "iterations",
+		reserved: iterations,
+		spent: spent.iterations
+	});
+	if (!unknownUnderCap && l.usdCapped && usdBudgeted && spent.usd > held.usd) overspent.push({
+		channel: "usd",
+		reserved: held.usd,
+		spent: spent.usd
+	});
+	for (const name of l.resources.keys()) {
+		const value = spent.resources?.[name];
+		const limit = held.resources?.[name]?.limit ?? 0;
+		if (value?.known && value.amount > limit) overspent.push({
+			channel: `resource:${name}`,
+			reserved: limit,
+			spent: value.amount
+		});
+	}
+	return {
+		overspent,
+		unknownUnderCap
+	};
+}
+/**
+* Release the whole reservation `held`, then commit actual spend; the difference is the refund
+* that flows back to `free`. Unconditional arithmetic: nothing here throws on spend it can read.
+*/
+function ledgerSettle(l, held, spent, unknownUnderCap) {
+	noteUnknowns(l, spent);
+	const spentTokens = chargedTokens(spent.tokens);
+	l.committedTokens += spentTokens;
+	if (l.tokensCapped) {
+		l.reservedTokens -= held.tokens;
+		l.freeTokens += held.tokens - spentTokens;
+	}
+	l.committedIterations += spent.iterations;
+	if (l.iterationsCapped) {
+		l.reservedIterations -= held.iterations;
+		l.freeIterations += held.iterations - spent.iterations;
+	}
+	if (l.usdCapped) {
+		l.reservedUsd -= held.usd;
+		l.committedUsd += spent.usd;
+		if (unknownUnderCap) {
+			l.usdTainted = true;
+			l.freeUsd = 0;
+		} else l.freeUsd += held.usd - spent.usd;
+	} else l.committedUsd += spent.usd;
+	return ledgerCommitResources(l, spent, held.resources ?? {});
+}
+/**
+* Direct free → committed debit (no ticket). `free` may go negative on overspend: the readout then
+* reports exhaustion and the in-loop guard halts the driver. Work with an unreported token count
+* still debits what IS known and marks the balance incomplete; refusing to record it is the "free
+* turn" the pool must never see.
+*/
+function ledgerObserve(l, spend, unknownUnderCap, requireAllResources) {
+	debit(l, spend);
+	l.ownerSpent = addSpend(l.ownerSpent, spend);
+	if (unknownUnderCap) l.usdTainted = true;
+	return ledgerCommitResources(l, spend, void 0, requireAllResources);
+}
+/** Move measured `spend` from free to committed on the token, iteration and dollar channels. */
+function debit(l, spend) {
+	noteUnknowns(l, spend);
+	const tokens = chargedTokens(spend.tokens);
+	if (l.tokensCapped) l.freeTokens -= tokens;
+	l.committedTokens += tokens;
+	if (l.iterationsCapped) l.freeIterations -= spend.iterations;
+	l.committedIterations += spend.iterations;
+	l.committedUsd += spend.usd;
+	if (l.usdCapped) l.freeUsd -= spend.usd;
+}
+/**
+* Reconstruct the balances from a prior process's durable record. Measured prior spend is debited
+* exactly once; a started-without-terminal child is charged at its entire reservation, so restart
+* never mints capacity and the false known flags stay visible. Direct arithmetic, not `observe`:
+* the prior spend ALREADY happened, and refusing to record it would be a zero-cost restart.
+*/
+function ledgerRestore(l, root, restore) {
+	for (const held of restore.heldReservations ?? []) {
+		assertValidBudget(held, "restored remaining reservation");
+		const tokens = held.maxTokens ?? 0;
+		const iterations = held.maxIterations ?? 0;
+		const usd = held.maxUsd ?? 0;
+		l.committedTokens += tokens;
+		l.committedIterations += iterations;
+		l.committedUsd += usd;
+		if (l.tokensCapped) l.freeTokens -= tokens;
+		if (l.iterationsCapped) l.freeIterations -= iterations;
+		if (l.usdCapped) l.freeUsd -= usd;
+		if (tokens > 0) l.tokensTainted = true;
+		if (usd > 0) l.usdMeasured = false;
+		for (const [name, value] of Object.entries(held.resources ?? {})) {
+			const resource = l.resources.get(name);
+			if (!resource || resource.unit !== value.unit) throw new Error(`restored reservation resource ${name}: unit mismatch`);
+			resource.committed += value.limit;
+			resource.remaining -= value.limit;
+			if (value.limit > 0) resource.known = false;
+		}
+	}
+	if (restore.owner) l.ownerSpent = addSpend(l.ownerSpent, restore.owner);
+	if (restore.committed !== void 0) {
+		const committed = restore.committed;
+		assertValidSpend(committed, "budget restore committed");
+		ledgerValidateUnits(l, committed);
+		ledgerCommitResources(l, committed);
+		debit(l, committed);
+		if (l.usdCapped && committed.usdKnown === false) {
+			l.usdTainted = true;
+			if (l.freeUsd > 0) l.committedUsd += l.freeUsd;
+			l.freeUsd = 0;
+		}
+	}
+	for (const [index, uncertain] of (restore.uncertainReservations ?? []).entries()) {
+		assertValidBudget(uncertain, `budget restore uncertainReservations[${index}]`);
+		ledgerCommitResources(l, withBudgetResources({
+			iterations: 0,
+			tokens: zeroTokenUsage(),
+			usd: 0,
+			ms: 0
+		}, root));
+		l.tokensTainted = true;
+		l.usdMeasured = false;
+		const tokens = uncertain.maxTokens ?? (l.tokensCapped ? Math.max(0, l.freeTokens) : 0);
+		const iterations = uncertain.maxIterations ?? (l.iterationsCapped ? Math.max(0, l.freeIterations) : 0);
+		l.committedTokens += tokens;
+		l.committedIterations += iterations;
+		if (l.tokensCapped) l.freeTokens -= tokens;
+		if (l.iterationsCapped) l.freeIterations -= iterations;
+		if (!l.usdCapped) continue;
+		if (uncertain.maxUsd === void 0) {
+			l.usdTainted = true;
+			l.committedUsd += Math.max(0, l.freeUsd);
+			l.freeUsd = 0;
+		} else {
+			l.freeUsd -= uncertain.maxUsd;
+			l.committedUsd += uncertain.maxUsd;
+		}
+	}
+}
+// src/runtime/supervise/usage-metering.ts
+/** Fold a normalized `UsageEvent` array into a `Spend`. Tokens and usd are separate
+*  channels; iterations come from `'iteration'` events. Pure; `ms` stays zero (the
+*  pool does not read wall-clock). */
+function spendFromUsageEvents(events) {
+	const totals = newUsageTotals();
+	for (const ev of events) meterUsageEvent(totals, ev);
+	return spendFromUsageTotals(totals);
+}
+/** Fresh accounting totals, optionally restored from verified committed spend. */
+function newUsageTotals(priorSpent) {
+	if (priorSpent !== void 0) assertValidSpend(priorSpent, "prior committed usage");
+	return {
+		...addResourceSpend(priorSpent?.resources),
+		tokens: priorSpent === void 0 ? zeroTokenUsage() : cloneTokenUsage(priorSpent.tokens),
+		tokensKnown: priorSpent?.tokensKnown !== false,
+		...priorSpent?.tokensProvenance === void 0 ? {} : { tokensProvenance: priorSpent.tokensProvenance },
+		usd: priorSpent?.usd ?? 0,
+		usdEstimated: priorSpent?.usdEstimated ?? 0,
+		usdKnown: priorSpent?.usdKnown !== false,
+		iterations: priorSpent?.iterations ?? 0
+	};
+}
+/**
+* Fold ONE usage event into running totals — the single place that decides which event kinds
+* meter. `progress` carries observed output rather than accounting, so it meters nothing; only
+* `iteration` advances the iteration count.
+*/
+function meterUsageEvent(totals, ev) {
+	if (ev.kind === "resource") {
+		totals.resources = addResourceSpend(totals.resources, Object.fromEntries([[ev.name, {
+			unit: ev.unit,
+			amount: ev.amount,
+			known: ev.known
+		}]])).resources;
+		return;
+	}
+	if (ev.kind === "tokens") {
+		if (ev.mode === "cumulative") {
+			if (ev.input < totals.tokens.input || ev.output < totals.tokens.output) throw new ValidationError("cumulative executor tokens must not decrease");
+			const snapshot = zeroTokenUsage();
+			addTokenUsage(snapshot, {
+				...ev,
+				...ev.freshInput === void 0 && totals.tokens.freshInput !== void 0 ? { freshInput: totals.tokens.freshInput } : {},
+				...ev.cacheRead === void 0 && totals.tokens.cacheRead !== void 0 ? { cacheRead: totals.tokens.cacheRead } : {},
+				...ev.cacheWrite === void 0 && totals.tokens.cacheWrite !== void 0 ? { cacheWrite: totals.tokens.cacheWrite } : {},
+				...totals.tokens.tokensKnown === false ? { tokensKnown: false } : {}
+			});
+			totals.tokens = snapshot;
+		} else addTokenUsage(totals.tokens, ev);
+		if (ev.tokensKnown === false) totals.tokensKnown = false;
+		const source = ev.provenance ?? "stream-receipt";
+		totals.tokensProvenance = totals.tokensProvenance === void 0 || totals.tokensProvenance === source ? source : "mixed";
+		return;
+	}
+	if (ev.kind === "cost") {
+		totals.usd += ev.usd;
+		if (ev.usdKnown === false) {
+			totals.usdEstimated += ev.usdEstimated ?? 0;
+			totals.usdKnown = false;
+		}
+		return;
+	}
+	if (ev.kind === "iteration") totals.iterations += 1;
+}
+/** Project folded totals onto the conserved-pool `Spend`. `ms` stays zero — the pool does not
+*  read wall-clock. */
+function spendFromUsageTotals(totals) {
+	return {
+		...addResourceSpend(totals.resources),
+		iterations: totals.iterations,
+		tokens: totals.tokens,
+		...totals.tokensKnown ? {} : { tokensKnown: false },
+		usd: totals.usd,
+		...totals.usdKnown ? {} : { usdKnown: false },
+		...totals.usdEstimated > 0 ? { usdEstimated: totals.usdEstimated } : {},
+		...totals.tokensProvenance === void 0 || totals.tokensProvenance === "stream-receipt" ? {} : { tokensProvenance: totals.tokensProvenance },
+		ms: 0
+	};
+}
+async function foldUsage(events) {
+	if (Array.isArray(events)) return spendFromUsageEvents(events);
+	const totals = newUsageTotals();
+	for await (const ev of events) meterUsageEvent(totals, ev);
+	return spendFromUsageTotals(totals);
+}
+// src/runtime/supervise/budget.ts
+/**
+* Conserved budget accounting: total ≡ free + reserved + committed on each capped channel.
+* Reservation moves current free capacity to a single-use ticket; reconciliation commits
+* measured spend and refunds the remainder. It closes the ticket before reporting any fault.
+* Measured overspend reduces future capacity and returns a BudgetViolation.
+*
+* Tokens use chargedTokens (input − cacheRead + output). Missing cache classification charges
+* the full prompt and marks the split unknown. Prices never weight this channel. Named resources
+* require explicit units and complete measurements; the pool trusts receipts, not external state.
+* Unknown enforced resource or dollar usage closes that channel's admission. Unknown tokens
+* preserve observed counts as a lower bound without ending the run. An uncapped child dollar
+* channel reports actual dollars without treating them as an overspend of zero.
+*
+* Recovery preserves durable cost and outstanding backing, queuing only missing funding until
+* actual settlements provide it. Fresh spawns reserve current funds. Restore debits each liability once,
+* preserves unknown markers, and keeps the original deadline. No I/O or ambient clock is read.
+* @experimental
+*/
+/** A reconciliation whose spend the pool cannot verify, thrown after the reservation settled.
+*  `budgetViolation` carries any measured overspend on the same settlement. */
+var BudgetReconcileFault = class extends Error {
+	budgetViolation;
+	constructor(message, budgetViolation) {
+		super(message);
+		this.name = "BudgetReconcileFault";
+		if (budgetViolation !== void 0) this.budgetViolation = budgetViolation;
+	}
+};
+/**
+* A waiting reservation that can never be granted: every open reservation settled and the free
+* balance still cannot cover it. `shortfalls` are the channels that did not fit at that moment.
+*/
+var ReservationWaitRefused = class extends Error {
+	reason = "budget-exhausted";
+	shortfalls;
+	constructor(shortfalls) {
+		super(`budget-exhausted: nothing left running could return enough budget for this worker (${shortfalls.map((shortfall) => `${shortfall.channel} requested ${shortfall.requested}, free ${shortfall.free}`).join("; ")})`);
+		this.name = "ReservationWaitRefused";
+		this.shortfalls = shortfalls;
+	}
+};
+/** Private lease operations; public pools retain their existing interface. */
+const budgetRecoverySeeds = /* @__PURE__ */ new WeakMap();
+const budgetLeases = /* @__PURE__ */ new WeakMap();
+const budgetLeaseUpdates = /* @__PURE__ */ new WeakMap();
+async function refreshBudgetLease(pool) {
+	await budgetLeaseUpdates.get(pool)?.();
+}
+/**
+* Create a conserved reservation pool from a root `Budget`. `runStartedAtMs` is the WALL-CLOCK
+* instant the root was recorded; the deadline is `runStartedAtMs + root.deadlineMs` (`0` when
+* none), an absolute instant. A resumed pool passes the ORIGINAL instant.
+*/
+function createBudgetPool(root, runStartedAtMs, restore = {}) {
+	assertValidBudget(root, "root budget");
+	if (!Number.isFinite(runStartedAtMs) || runStartedAtMs < 0) throw new Error("budget runStartedAtMs must be a non-negative finite number");
+	const ledger = openBudgetLedger(root, runStartedAtMs);
+	let nextTicketId = 0;
+	const open = /* @__PURE__ */ new Map();
+	/** Tickets admitted to wait for budget, in the order they asked. Each is also in `open`. */
+	const waiting = [];
+	/** Open tickets that hold nothing: waiting, or refused and not yet reconciled. */
+	const holdingNothing = /* @__PURE__ */ new Set();
+	const leases = new ReservationLeases(ledger, root, open, holdingNothing, waiting, grantWaiting, recover, budgetRecoverySeeds.get(restore));
+	/** Grant waiting tickets in the order they asked while the head fits. When the head does not
+	*  fit and no reservation is held that could return budget, nothing can ever cover it: refuse
+	*  it, and go on with the next. */
+	function grantWaiting() {
+		while (waiting.length > 0) {
+			const head = waiting[0];
+			if (head.refresh) head.budget = head.refresh();
+			const shortfalls = ledgerShortfalls(ledger, head.budget, head.keep).filter((entry) => !head.refresh || entry.closedByUnknownSpend || entry.requested > 0);
+			if (shortfalls.length === 0) {
+				waiting.shift();
+				ledgerTake(ledger, head.budget);
+				holdingNothing.delete(head.ticket.id);
+				head.acquired?.();
+				head.grant();
+				continue;
+			}
+			if (leases.hasRefundSource(head.ticket.id) && !shortfalls.some((entry) => entry.closedByUnknownSpend)) return;
+			waiting.shift();
+			head.refuse(new ReservationWaitRefused(shortfalls));
+		}
+	}
+	/** Admit `b` to wait: it holds nothing until settlements return enough, in the order asked. */
+	function admitToWait(b, holder, keep) {
+		const id = nextTicketId++;
+		open.set(id, holder);
+		const ticket = ticketFor(id, b, ledger);
+		leases.remember(ticket, keep);
+		let grant;
+		let refuse;
+		const granted = new Promise((resolve, reject) => {
+			grant = resolve;
+			refuse = reject;
+		});
+		granted.catch(() => void 0);
+		holdingNothing.add(id);
+		waiting.push({
+			ticket,
+			budget: b,
+			keep,
+			grant,
+			refuse
+		});
+		return {
+			ok: true,
+			ticket,
+			granted
+		};
+	}
+	function recover(budget, holder, nodeId, keep) {
+		const seed = leases.seeds.get(nodeId);
+		if (!seed) return reserve(budget, holder, {
+			wait: true,
+			keep
+		});
+		if (seed.closed) throw new ValidationError("closed custody backing cannot authorize execution");
+		leases.seeds.delete(nodeId);
+		const ticket = ticketFor(nextTicketId++, budget, ledger);
+		open.set(ticket.id, holder);
+		leases.remember(ticket, keep);
+		leases.restore(ticket, budget, seed.spent, seed.held);
+		const granted = leases.resume(ticket);
+		return {
+			ok: true,
+			ticket,
+			...leases.isPaused(ticket) ? { granted } : {}
+		};
+	}
+	function reserve(b, holder = { stage: "admitted" }, options = {}) {
+		assertValidBudget(b, "reservation budget");
+		assertResourceDeclarations(ledger, b);
+		if (leases.blocked) return {
+			ok: false,
+			reason: "budget-exhausted"
+		};
+		const wantUsd = b.maxUsd ?? 0;
+		const keep = options.keep;
+		const shortfalls = ledgerShortfalls(ledger, b, keep);
+		if (shortfalls.length === 0 && wantUsd > 0 && !ledger.usdCapped) return {
+			ok: false,
+			reason: "usd-unbudgeted"
+		};
+		const queueAhead = options.wait === true && waiting.length > 0;
+		if (shortfalls.length === 0 && !queueAhead) {
+			ledgerTake(ledger, b);
+			const id = nextTicketId++;
+			open.set(id, holder);
+			const ticket = ticketFor(id, b, ledger);
+			leases.remember(ticket, keep);
+			return {
+				ok: true,
+				ticket
+			};
+		}
+		if (options.wait !== true || shortfalls.some((shortfall) => shortfall.closedByUnknownSpend) || !leases.hasRefundSource()) return {
+			ok: false,
+			reason: "budget-exhausted",
+			shortfalls
+		};
+		return admitToWait(b, holder, keep);
+	}
+	function attribute(ticket, holder) {
+		const current = open.get(ticket.id);
+		if (current === void 0) return;
+		open.set(ticket.id, {
+			...current,
+			...holder
+		});
+	}
+	function reconcile(ticket, spent) {
+		if (!open.has(ticket.id)) throw new Error(`budget pool: reconcile of unknown or already-settled ticket ${ticket.id}`);
+		assertValidSpend(spent, `budget pool ticket ${ticket.id} spend`);
+		ledgerValidateUnits(ledger, spent);
+		const heldNothing = holdingNothing.delete(ticket.id);
+		const index = waiting.findIndex((entry) => entry.ticket.id === ticket.id);
+		if (index >= 0) waiting.splice(index, 1);
+		const adjustment = leases.settle(ticket, spent);
+		const held = adjustment?.held ?? (heldNothing ? {
+			tokens: 0,
+			usd: 0,
+			iterations: 0,
+			resources: void 0
+		} : ticket.reserved);
+		const charge = adjustment?.charge ?? spent;
+		const usdBudgeted = ticket.reserved.usdBudgeted !== false;
+		const { overspent, unknownUnderCap } = ledgerClassifyOverspend(ledger, heldNothing && adjustment === void 0 ? held : ticket.reserved, usdBudgeted, spent, heldNothing && adjustment === void 0 ? {
+			maxTokens: 0,
+			maxIterations: 0
+		} : ticket.limits);
+		let fault = unknownUnderCap ? `ticket ${ticket.id} reported unknown dollar cost under a dollar-capped budget` : void 0;
+		open.delete(ticket.id);
+		const resourceSettlement = ledgerSettle(ledger, held, charge, unknownUnderCap);
+		fault ??= resourceSettlement.fault;
+		grantWaiting();
+		const violation = overspent.length === 0 ? void 0 : Object.freeze({ overspent: Object.freeze(overspent.map((entry) => Object.freeze(entry))) });
+		if (fault !== void 0) throw new BudgetReconcileFault(`budget pool: ${fault}`, violation);
+		return violation;
+	}
+	function observe(spend, options = {}) {
+		assertValidSpend(spend, "observed spend");
+		ledgerValidateUnits(ledger, spend);
+		const unknownUnderCap = ledger.usdCapped && spend.usdKnown === false;
+		if (unknownUnderCap && options.alreadySpent !== true) throw new ValidationError("budget pool: cannot observe unknown dollar cost under a dollar-capped budget");
+		const settlement = ledgerObserve(ledger, spend, unknownUnderCap, !options.partial);
+		const violation = settlement.fault ?? settlement.rootExceeded;
+		if (violation) throw new ValidationError(`budget pool: ${violation}`);
+	}
+	function readout() {
+		return {
+			...ledger.resources.size ? { resources: Object.fromEntries([...ledger.resources].map(([name, value]) => [name, { ...value }])) } : {},
+			tokensLeft: ledger.freeTokens,
+			tokensCapped: ledger.tokensCapped,
+			committedTokens: ledger.committedTokens,
+			tokensKnown: !ledger.tokensTainted,
+			cacheBreakdownKnown: !ledger.cacheBreakdownTainted,
+			usdLeft: ledger.usdCapped ? ledger.usdTainted ? 0 : ledger.freeUsd : 0,
+			usdCapped: ledger.usdCapped,
+			usdKnown: ledger.usdMeasured && !ledger.usdTainted,
+			iterationsLeft: ledger.freeIterations,
+			iterationsCapped: ledger.iterationsCapped,
+			deadlineMs: ledger.absoluteDeadlineMs,
+			reservedTokens: ledger.reservedTokens
+		};
+	}
+	function openReservations() {
+		return [...open].map(([ticketId, holder]) => Object.freeze({
+			ticketId,
+			...holder
+		}));
+	}
+	function assertNoOpenTickets() {
+		if (open.size > 0) throw new Error(`budget pool: ${open.size} reservation(s) still open at join barrier (${openReservations().map(describeLeakedReservation).join("; ")}) — conserved-pool invariant violated`);
+	}
+	for (const seed of leases.seeds.values()) ledgerTake(ledger, seed.held);
+	ledgerRestore(ledger, root, restore);
+	for (const seed of leases.seeds.values()) if (!seed.closed) ledgerRestore(ledger, root, { committed: seed.spent });
+	const pool = {
+		reserve,
+		attribute,
+		reconcile,
+		spendFrom: foldUsage,
+		readout,
+		observe,
+		assertNoOpenTickets,
+		openReservations
+	};
+	budgetLeases.set(pool, leases);
+	return pool;
+}
+var ReservationLeases = class {
+	ledger;
+	root;
+	open;
+	empty;
+	waiting;
+	pump;
+	recover;
+	blocked = false;
+	rebased = /* @__PURE__ */ new Map();
+	kept = /* @__PURE__ */ new Map();
+	tickets = /* @__PURE__ */ new Map();
+	seeds;
+	constructor(ledger, root, open, empty, waiting, pump, recover, seeds = []) {
+		this.ledger = ledger;
+		this.root = root;
+		this.open = open;
+		this.empty = empty;
+		this.waiting = waiting;
+		this.pump = pump;
+		this.recover = recover;
+		this.seeds = new Map(seeds.map(({ id, ...seed }) => [id, seed]));
+	}
+	restore(ticket, ceiling, spent, held) {
+		this.rebased.set(ticket.id, {
+			ceiling,
+			spent,
+			held,
+			liabilities: held,
+			paused: true
+		});
+		if (!hasAllocation(heldAmounts(held, this.ledger))) this.empty.add(ticket.id);
+	}
+	remember(ticket, keep) {
+		this.tickets.set(ticket.id, ticket);
+		this.kept.set(ticket.id, keep && { ...keep });
+	}
+	hasRefundSource(except) {
+		for (const [id, ticket] of this.tickets) {
+			if (id === except || !this.open.has(id) || this.empty.has(id)) continue;
+			const state = this.rebased.get(id);
+			if (hasAllocation(state ? heldAmounts(state.held, this.ledger) : ticket.reserved)) return true;
+		}
+		return [...this.seeds.values()].some((seed) => !seed.closed && hasAllocation(heldAmounts(seed.held, this.ledger)));
+	}
+	liabilities(spent) {
+		const l = this.ledger;
+		const keep = (cap, reserved, committed, reported, unknown = false) => cap === void 0 ? void 0 : Math.max(reserved + Math.max(0, committed - reported), unknown ? Math.max(0, cap - reported) : 0);
+		return {
+			...this.root.maxTokens === void 0 ? {} : { maxTokens: keep(this.root.maxTokens, l.reservedTokens, l.committedTokens, chargedTokens(spent.tokens), l.tokensTainted) },
+			...this.root.maxIterations === void 0 ? {} : { maxIterations: keep(this.root.maxIterations, l.reservedIterations, l.committedIterations, spent.iterations) },
+			...this.root.maxUsd === void 0 ? {} : { maxUsd: keep(this.root.maxUsd, l.reservedUsd, l.committedUsd, spent.usd, l.usdTainted || !l.usdMeasured) },
+			...this.root.resources === void 0 ? {} : { resources: Object.fromEntries([...l.resources].map(([name, value]) => [name, {
+				unit: value.unit,
+				limit: keep(value.limit, value.reserved, value.committed, spent.resources?.[name]?.amount ?? 0, !value.known)
+			}])) }
+		};
+	}
+	rebase(ticket, ceiling, spent, liabilities, pause = false) {
+		const old = this.rebased.get(ticket.id);
+		if (!this.open.has(ticket.id) && !old?.closed) return;
+		const state = old ?? {
+			ceiling,
+			spent: zeroSpend(),
+			held: ceiling,
+			paused: true,
+			liabilities
+		};
+		state.paused ||= pause;
+		const next = this.plannedHold(ticket, ceiling, spent, liabilities, pause);
+		const held = heldAmounts(state.held, this.ledger);
+		const delta = withBudgetResources(unreportedSpend(spent, state.spent), ceiling, true);
+		ledgerSettle(this.ledger, held, delta, this.ledger.usdCapped && delta.usdKnown === false);
+		ledgerTake(this.ledger, next);
+		state.spent = spent;
+		state.held = next;
+		state.liabilities = liabilities;
+		this.rebased.set(ticket.id, state);
+		if (hasAllocation(heldAmounts(next, this.ledger))) this.empty.delete(ticket.id);
+		else this.empty.add(ticket.id);
+		this.pump();
+	}
+	plannedHold(ticket, ceiling, spent, liabilities, pause) {
+		return pause || (this.rebased.get(ticket.id)?.paused ?? true) ? liabilities : maximumBudget(remainingBudget(ceiling, spent), liabilities);
+	}
+	resume(ticket) {
+		const state = this.rebased.get(ticket.id);
+		if (!state?.paused) return Promise.resolve();
+		if (!this.open.has(ticket.id)) return Promise.reject(new ValidationError("closed admission cannot resume"));
+		const refresh = () => differenceBudget(remainingBudget(state.ceiling, state.spent), state.held);
+		const acquired = () => {
+			state.paused = false;
+			state.held = maximumBudget(remainingBudget(state.ceiling, state.spent), state.held);
+		};
+		const budget = refresh();
+		const keep = this.kept.get(ticket.id);
+		const shortfalls = ledgerShortfalls(this.ledger, budget, keep).filter((entry) => entry.closedByUnknownSpend || entry.requested > 0);
+		if (shortfalls.length === 0 && (this.waiting.length === 0 || !hasAllocation(heldAmounts(budget, this.ledger)))) {
+			ledgerTake(this.ledger, budget);
+			this.empty.delete(ticket.id);
+			acquired();
+			return Promise.resolve();
+		}
+		if (shortfalls.some((entry) => entry.closedByUnknownSpend) || !this.hasRefundSource(ticket.id)) return Promise.reject(new ReservationWaitRefused(shortfalls));
+		const granted = new Promise((grant, refuse) => {
+			this.waiting.push({
+				ticket,
+				budget,
+				keep,
+				refresh,
+				acquired,
+				grant,
+				refuse
+			});
+		});
+		granted.catch(() => void 0);
+		return granted;
+	}
+	reservation(ticket) {
+		return this.rebased.get(ticket.id)?.held;
+	}
+	isPaused(ticket) {
+		return this.rebased.get(ticket.id)?.paused === true;
+	}
+	isBacked(ticket) {
+		return this.open.has(ticket.id) || this.rebased.get(ticket.id)?.closed === true;
+	}
+	observeTerminal(ticket, spent) {
+		const state = this.rebased.get(ticket.id);
+		if (state && !state.closed) state.liabilities = completedLeafBacking(state.held, spent, state.spent);
+	}
+	acknowledgeTeardown(ticket) {
+		const state = this.rebased.get(ticket.id);
+		if (!state?.closed) return;
+		const next = completedLeafBacking(state.held, state.spent, state.spent, true);
+		const refund = differenceBudget(state.held, next);
+		ledgerSettle(this.ledger, heldAmounts(refund, this.ledger), withBudgetResources(zeroSpend(), state.ceiling, true), false);
+		state.held = state.liabilities = next;
+		if (!hasAllocation(heldAmounts(next, this.ledger))) this.rebased.delete(ticket.id);
+		this.pump();
+	}
+	settle(ticket, spent) {
+		const state = this.rebased.get(ticket.id);
+		this.kept.delete(ticket.id);
+		this.tickets.delete(ticket.id);
+		if (!state) return void 0;
+		const charge = unreportedSpend(spent, state.spent);
+		const held = differenceBudget(state.held, state.liabilities);
+		if (hasAllocation(heldAmounts(state.liabilities, this.ledger))) {
+			state.closed = true;
+			state.paused = true;
+			state.spent = spent;
+			state.held = state.liabilities;
+			return {
+				held: heldAmounts(held, this.ledger),
+				charge
+			};
+		}
+		this.rebased.delete(ticket.id);
+		return {
+			held: heldAmounts(state.held, this.ledger),
+			charge
+		};
+	}
+};
+/** A real leaf result ends model work; named physical backing awaits its cleanup ACK.
+* Unknown past usage remains backed even after the resource itself has been released. */
+function completedLeafBacking(held, spent, prior, cleanupConfirmed = false) {
+	const delta = unreportedSpend(spent, prior);
+	return {
+		...held,
+		...held.maxTokens === void 0 || spent.tokensKnown === false || spent.tokens.tokensKnown === false ? {} : { maxTokens: 0 },
+		...held.maxIterations === void 0 ? {} : { maxIterations: 0 },
+		...held.maxUsd === void 0 || spent.usdKnown === false ? {} : { maxUsd: 0 },
+		...held.resources === void 0 ? {} : { resources: Object.fromEntries(Object.entries(held.resources).map(([name, value]) => [name, {
+			...value,
+			limit: spent.resources?.[name]?.known !== true ? value.limit : cleanupConfirmed ? 0 : Math.max(0, value.limit - (delta.resources?.[name]?.amount ?? 0))
+		}])) }
+	};
+}
+function heldAmounts(budget, ledger) {
+	return {
+		tokens: ledger.tokensCapped ? budget.maxTokens ?? 0 : 0,
+		iterations: ledger.iterationsCapped ? budget.maxIterations ?? 0 : 0,
+		usd: budget.maxUsd ?? 0,
+		...budget.resources ? { resources: budget.resources } : {}
+	};
+}
+function remainingBudget(budget, spent) {
+	return differenceBudget(budget, {
+		maxTokens: chargedTokens(spent.tokens),
+		maxIterations: spent.iterations,
+		maxUsd: spent.usd,
+		resources: Object.fromEntries(Object.entries(spent.resources ?? {}).map(([name, value]) => [name, {
+			unit: value.unit,
+			limit: value.amount
+		}]))
+	});
+}
+function maximumBudget(grant, backing) {
+	return {
+		...grant,
+		...grant.maxTokens === void 0 ? {} : { maxTokens: Math.max(grant.maxTokens, backing.maxTokens ?? 0) },
+		...grant.maxIterations === void 0 ? {} : { maxIterations: Math.max(grant.maxIterations, backing.maxIterations ?? 0) },
+		...grant.maxUsd === void 0 ? {} : { maxUsd: Math.max(grant.maxUsd, backing.maxUsd ?? 0) },
+		...grant.resources === void 0 ? {} : { resources: Object.fromEntries(Object.entries(grant.resources).map(([name, value]) => [name, {
+			unit: value.unit,
+			limit: Math.max(value.limit, backing.resources?.[name]?.limit ?? 0)
+		}])) }
+	};
+}
+function differenceBudget(total, prior) {
+	return {
+		...total.maxTokens === void 0 ? {} : { maxTokens: Math.max(0, total.maxTokens - (prior.maxTokens ?? 0)) },
+		...total.maxIterations === void 0 ? {} : { maxIterations: Math.max(0, total.maxIterations - (prior.maxIterations ?? 0)) },
+		...total.maxUsd === void 0 ? {} : { maxUsd: Math.max(0, total.maxUsd - (prior.maxUsd ?? 0)) },
+		...total.resources === void 0 ? {} : { resources: Object.fromEntries(Object.entries(total.resources).map(([name, value]) => [name, {
+			unit: value.unit,
+			limit: Math.max(0, value.limit - (prior.resources?.[name]?.limit ?? 0))
+		}])) }
+	};
+}
+function hasAllocation(budget) {
+	return budget.tokens > 0 || budget.iterations > 0 || budget.usd > 0 || Object.values(budget.resources ?? {}).some((value) => value.limit > 0);
+}
+/** A reservation must name a limit for exactly the resources the root declared, in its units. */
+function assertResourceDeclarations(ledger, b) {
+	for (const [name, state] of ledger.resources) {
+		const wanted = b.resources?.[name];
+		if (!wanted) throw new ValidationError(`resource ${name}: child must declare its limit`);
+		if (wanted.unit !== state.unit) throw new ValidationError(`resource ${name}: unit mismatch`);
+	}
+	for (const name of Object.keys(b.resources ?? {})) if (!ledger.resources.has(name)) throw new ValidationError(`resource ${name}: root must declare its limit`);
+}
+function ticketFor(id, b, ledger) {
+	return {
+		id,
+		limits: {
+			...b.maxTokens === void 0 ? {} : { maxTokens: b.maxTokens },
+			...b.maxIterations === void 0 ? {} : { maxIterations: b.maxIterations }
+		},
+		reserved: {
+			...b.resources === void 0 ? {} : { resources: Object.fromEntries(Object.entries(b.resources).map(([name, value]) => [name, { ...value }])) },
+			tokens: ledger.tokensCapped ? b.maxTokens ?? 0 : 0,
+			usd: b.maxUsd ?? 0,
+			iterations: ledger.iterationsCapped ? b.maxIterations ?? 0 : 0,
+			usdBudgeted: b.maxUsd !== void 0
+		}
+	};
+}
+/** Name one leaked reservation by its holder. */
+function describeLeakedReservation(leak) {
+	const parts = [`ticket ${leak.ticketId}`];
+	if (leak.childId !== void 0) parts.push(`child ${leak.childId}`);
+	if (leak.label !== void 0) parts.push(`label ${leak.label}`);
+	if (leak.assignment !== void 0) parts.push(`assignment ${leak.assignment}`);
+	parts.push(`stage ${leak.stage}`);
+	return parts.join(", ");
+}
+// src/runtime/supervise/credential-refusal.ts
+/**
+* The account owner refused an unsupported credential route before dispatch. This is the
+* provider SDK's machine contract, not an HTTP status, class-name guess, or prose match.
+*/
+function isCredentialRefusal(error) {
+	if (!(error instanceof Error)) return false;
+	try {
+		return Object.getOwnPropertyDescriptor(error, "code")?.value === "model_credential_refused";
+	} catch {
+		return false;
+	}
+}
+/**
+* The message prefix of agent-provider-tangle's generic credential command failure. The provider
+* exports no type or constant for it, so the kernel credential test raises it through the
+* provider's own command resolver and fails when the message drifts.
+*/
+const CREDENTIAL_COMMAND_FAILURE = "Tangle credential command failed (";
+/**
+* The exit code of agent-provider-tangle's credential command (`acct sandbox resolve`) in the
+* error or its causes, or undefined.
+*
+* The provider reports the command's generic failure as `Tangle credential command failed
+* (exit N)` with the process's `exitCode` and `terminationSignal` as own fields; a refusal it can
+* parse (exit 75 or 78) arrives typed instead and is classified on its code. Before any dispatch
+* this failure ran nothing, and counting it as an unresolved pending invocation stopped 10 nodes
+* and lost 7 runs between 2026-10-12 and 2026-10-19 (test-acceptance-canary-20261015c met 26 in
+* 2.2 minutes). It pauses like a capacity refusal, bounded by the deadline, the budget and
+* cancellation as every pause is.
+*/
+function credentialCommandExit(error) {
+	for (const link of causeChain(error)) try {
+		if (!(link instanceof Error) || !link.message.startsWith(CREDENTIAL_COMMAND_FAILURE) || !Object.hasOwn(link, "terminationSignal")) continue;
+		const exitCode = Reflect.get(link, "exitCode");
+		if (typeof exitCode === "number" && Number.isInteger(exitCode) && exitCode > 0) return exitCode;
+	} catch {}
+}
+// src/runtime/json-content-hash.ts
+/**
+* Stable hash for the trace payload. Not cryptographic — only used so
+* downstream eval pipelines can group iterations whose task / output is the
+* same. Bare structural hash; non-JSON values stringify via their `toString`.
+*/
+function hashJson(value) {
+	const str = jsonContentText(value);
+	return fnv1a32Hex(str);
+}
+/** JSON text with String fallback, including quoted JSON strings and cyclic values. */
+function jsonContentText(value) {
+	let str;
+	try {
+		str = JSON.stringify(value) ?? String(value);
+	} catch {
+		str = String(value);
+	}
+	return str;
+}
+// src/runtime/supervise/executor-outcome.ts
+const outcomeSchema = AgentTurnResultSchema.pick({
+	success: true,
+	error: true,
+	failure: true
+}).extend({
+	errorCode: AgentTurnResultSchema.shape.error,
+	statusCode: z.number().int().min(400).max(599).optional()
+}).strict();
+/** Read only the executor envelope; application output and grades are not execution status. */
+function executorFailure(result) {
+	if (result.outcome === void 0) return void 0;
+	const outcome = outcomeSchema.parse(result.outcome);
+	if (outcome.success) return void 0;
+	return {
+		error: outcome.error ?? "Agent execution failed",
+		...outcome.failure === void 0 ? {} : { failure: outcome.failure },
+		...outcome.errorCode === void 0 ? {} : { errorCode: outcome.errorCode },
+		...outcome.statusCode === void 0 ? {} : { statusCode: outcome.statusCode }
+	};
+}
+/** The failure text alone, for callers that record a settlement reason. */
+function executorFailureReason(result) {
+	return executorFailure(result)?.error;
+}
+/** Canonical producer classifications take precedence over the legacy code/message vocabulary. */
+const TURN_FAILURE_POLICY = {
+	capacity: {
+		classification: "unavailable",
+		failureKind: "infra",
+		infra: true,
+		code: "upstream-unavailable",
+		owner: "platform"
+	},
+	caller: {
+		classification: "terminal",
+		failureKind: "deterministic",
+		infra: void 0,
+		code: "request-rejected",
+		owner: "caller"
+	},
+	infra: {
+		classification: "transient",
+		failureKind: "infra",
+		infra: true,
+		code: "transport",
+		owner: "platform"
+	},
+	work: {
+		classification: "transient",
+		failureKind: "deterministic",
+		infra: void 0,
+		code: "work-failed",
+		owner: "work"
+	}
+};
+const turnFailurePolicy = (failure) => TURN_FAILURE_POLICY[failure.kind];
+/** Validate the shared contract on an envelope or any wrapped cause; malformed legacy data falls back. */
+function turnFailureOf(value) {
+	for (const link of causeChain(value)) try {
+		const parsed = AgentTurnFailureSchema.safeParse(Reflect.get(link, "failure"));
+		if (parsed.success) return parsed.data;
+	} catch {}
+}
+const PLATFORM_FAILURE_CODES = new Set([
+	"QUOTA_EXCEEDED",
+	"provider_quota_exceeded",
+	"provider_quota_exhausted",
+	"buffer.overflow",
+	"EXECUTION_INTERRUPTED",
+	"TIMEOUT",
+	"ECONNRESET",
+	"ECONNREFUSED",
+	"ETIMEDOUT",
+	"EPIPE",
+	"EADDRINUSE"
+].map((code) => code.toLowerCase()));
+const PLATFORM_FAILURE_MESSAGES = [
+	/^terminated$/u,
+	/Execution exceeded its time limit/u,
+	/Platform key[- ]verification/u,
+	/Platform key delegation failed/u,
+	/Bad Gateway/iu,
+	/Cannot connect to API/u,
+	/Failed to connect to Sandbox API/u,
+	/fetch failed/u,
+	/A sandbox lifecycle operation is already in progress/u,
+	/exceeded its string bound/u,
+	/exceeds its JSON bound/u,
+	/No provider served model/u,
+	/Invalid API key/u,
+	/provider_quota_exceeded|provider_quota_exhausted|QUOTA_EXCEEDED|rate limit/iu,
+	/is at its box cap/u,
+	/could not materialize the seat credential/u,
+	/OpenCode exited while a model step was still in progress/u
+];
+/** Producer-owned classification first; legacy platform codes/messages otherwise leave attribution unknown. */
+function executorFailureInfra(failure) {
+	if (failure.failure) return turnFailurePolicy(failure.failure).infra;
+	const code = failure.errorCode?.toLowerCase();
+	if (code !== void 0 && PLATFORM_FAILURE_CODES.has(code)) return true;
+	return PLATFORM_FAILURE_MESSAGES.some((pattern) => pattern.test(failure.error)) ? true : void 0;
+}
+/** Preserve deterministic result pointers across built-in executors and replay.
+* FNV-1a is an identity convention here, not a cryptographic integrity check. */
+function contentRef(prefix, value) {
+	const str = jsonContentText(value);
+	return `${prefix}:${fnv1a32Hex(str)}`;
+}
+// src/durable/content-address.ts
+/** Stable content address shared by result and trace artifacts. */
+function contentAddress(artifact) {
+	return `sha256:${createHash("sha256").update(stableStringify(artifact), "utf-8").digest("hex")}`;
+}
+function stableStringify(value) {
+	if (value === null || typeof value !== "object") return JSON.stringify(value) ?? "null";
+	if (Array.isArray(value)) return `[${value.map(stableStringify).join(",")}]`;
+	return `{${Object.entries(value).filter(([, v]) => v !== void 0).sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0).map(([k, v]) => `${JSON.stringify(k)}:${stableStringify(v)}`).join(",")}}`;
+}
+// src/runtime/supervise/trace-root.ts
+/**
+* Trace roots: one Merkle root over the events a turn archived, so a single event can be proven
+* against the hash its journal record carries without reading the rest of the archive.
+*
+* The leaves are the archived events in stored order, each hashed with its own random salt, then
+* one summary leaf that counts the events and the tool calls among them. The artifact keeps every
+* leaf and salt and is stored under its content address in the run's result blob store, beside
+* the archive it commits to. A verifier recomputes leaf `i` from `events[i]` of the `outRef` blob
+* and `salts[i]`, checks it against `leaves[i]`, and checks `merkleRoot(leaves)` against the root
+* the journal recorded. Leaf identity is `(outRef, index)`: an event's own `id` is a session
+* buffer offset and is absent on terminal events.
+*
+* One event array has one root per node. A result always gets its own. Evidence whose events the
+* node already rooted gets none: a retained owner's deferred workspace capture stores the turn it
+* just committed again, with the workspace fields added, under another `outRef`. A second root
+* over the same events would give one turn two count candidates and two run-root leaves.
+*
+* Salts are random, so a trace root can never be recomputed from the archive alone. Recovery and
+* replay copy the recorded receipt; they never derive a new one.
+*/
+/** Schema identifier of a stored {@link TraceRootArtifact}. */
+const TRACE_ROOT_SCHEMA = "agent-runtime.trace-root.v1";
+/** Schema identifier of the {@link TraceSummary} carried by a trace root's last leaf. */
+const TRACE_SUMMARY_SCHEMA = "agent-runtime.trace-summary.v1";
+/** @internal */
+function traceRootWriter(blobs, nodeId) {
+	const roots = /* @__PURE__ */ new Map();
+	/** Digests of the event arrays this node holds a stored root for. */
+	const rooted = /* @__PURE__ */ new Set();
+	const memoized = (outRef, out, evidence) => {
+		const known = roots.get(outRef);
+		if (known !== void 0) return known;
+		const pending = (async () => {
+			const events = archivedEvents(out);
+			if (events === void 0) return void 0;
+			if (evidence) {
+				await Promise.allSettled([...roots.values()]);
+				if (rooted.has(await eventsDigest(events))) return void 0;
+			}
+			const built = await traceRootArtifact(nodeId, outRef, events).catch((error) => {
+				if (error instanceof LedgerCanonicalizationError) return void 0;
+				throw error;
+			});
+			if (built === void 0) return void 0;
+			const { artifact, digest } = built;
+			await setImmediate();
+			const ref = contentAddress(artifact);
+			await setImmediate();
+			await blobs.put(ref, artifact);
+			rooted.add(digest);
+			return {
+				root: artifact.root,
+				ref,
+				leafCount: artifact.leafCount
+			};
+		})();
+		roots.set(outRef, pending);
+		pending.catch(() => roots.delete(outRef));
+		return pending;
+	};
+	return {
+		write: (outRef, result) => result.outputFormat === "json" ? Promise.resolve(void 0) : memoized(outRef, result.out, false),
+		writeEvidence: (outRef, out) => memoized(outRef, out, true),
+		async recorded(outRef) {
+			if (outRef === void 0) return void 0;
+			return roots.get(outRef)?.catch(() => void 0);
+		}
+	};
+}
+function archivedEvents(out) {
+	if (out === null || typeof out !== "object" || Array.isArray(out)) return void 0;
+	const events = out.events;
+	return Array.isArray(events) ? events : void 0;
+}
+/** The longest stretch of hashing between yields to the event loop. Hashing runs about 40 µs per
+*  event, and the largest archived turn holds 65,276 events: unbroken, that blocked the process
+*  for 2.7 s while sibling turns, coordination calls and heartbeats waited. A slice is measured
+*  in time, not events, because one event can be megabytes. */
+const SLICE_MS = 10;
+/** Yields to the event loop once a slice has run `SLICE_MS`; `undefined` while it has not. */
+function slicer() {
+	let started = performance.now();
+	return () => {
+		if (performance.now() - started < SLICE_MS) return void 0;
+		return setImmediate().then(() => {
+			started = performance.now();
+		});
+	};
+}
+/** The identity of an event array as stored: the digest of each event's stored JSON, in order.
+*  Two arrays with one digest have the same leaves' content. */
+async function eventsDigest(events) {
+	const hash = createHash("sha256");
+	const slice = slicer();
+	for (const event of events) {
+		const yielded = slice();
+		if (yielded !== void 0) await yielded;
+		hash.update(storedText(event)).update("\n");
+	}
+	return hash.digest("hex");
+}
+async function traceRootArtifact(nodeId, outRef, archived) {
+	const salts = [];
+	const leaves = [];
+	const tree = merkleTree();
+	const identity = createHash("sha256");
+	const tools = createSandboxToolPartState();
+	const toolCalls = /* @__PURE__ */ new Map();
+	const slice = slicer();
+	for (const event of archived) {
+		const yielded = slice();
+		if (yielded !== void 0) await yielded;
+		const text = storedText(event);
+		identity.update(text).update("\n");
+		const stored = JSON.parse(text);
+		const salt = merkleSalt();
+		const leaf = merkleLeafHash(canonicalString(jsonDocument(stored)), salt);
+		salts.push(salt);
+		leaves.push(leaf);
+		tree.push(leaf);
+		for (const projected of mapSandboxToolEvent(stored, tools)) {
+			if (projected.type !== "tool_call") continue;
+			toolCalls.set(projected.toolName, (toolCalls.get(projected.toolName) ?? 0) + 1);
+		}
+	}
+	const summary = {
+		schema: TRACE_SUMMARY_SCHEMA,
+		events: archived.length,
+		toolCalls: Object.fromEntries(toolCalls)
+	};
+	const salt = merkleSalt();
+	const leaf = merkleLeafHash(canonicalString(summary), salt);
+	salts.push(salt);
+	leaves.push(leaf);
+	tree.push(leaf);
+	return {
+		artifact: {
+			schema: TRACE_ROOT_SCHEMA,
+			nodeId,
+			outRef,
+			root: tree.root(),
+			leafCount: leaves.length,
+			salts,
+			leaves,
+			summary
+		},
+		digest: identity.digest("hex")
+	};
+}
+/**
+* `merkleRoot(leaves)` built as the leaves arrive, so its interior hashes run inside the sliced
+* leaf loop instead of in one block after it (0.4 s for 65,277 leaves). It keeps the perfect
+* subtrees of RFC 9162, largest first, and joins two with ledger-core's own interior hash,
+* `merkleRoot([left, right])`; the root folds them from the right, as RFC 9162 splits at the
+* largest power of two.
+*/
+function merkleTree() {
+	const peaks = [];
+	return {
+		push(leaf) {
+			let hash = leaf;
+			let size = 1;
+			while (peaks.at(-1)?.size === size) {
+				hash = merkleRoot([peaks.pop().hash, hash]);
+				size *= 2;
+			}
+			peaks.push({
+				hash,
+				size
+			});
+		},
+		root() {
+			let root = peaks.at(-1).hash;
+			for (let index = peaks.length - 2; index >= 0; index -= 1) root = merkleRoot([peaks[index].hash, root]);
+			return root;
+		}
+	};
+}
+/** One array item as `JSON.stringify` writes it: `JSON.parse` of it is what `events[i]` holds. */
+function storedText(event) {
+	return JSON.stringify(event) ?? "null";
+}
+// src/runtime/supervise/upstream-unavailable.ts
+/** Shared capacity recognition and pause policy for drivers and retained leaves. */
+/** Legacy capacity codes for producers without the canonical failure contract. */
+const UNAVAILABLE_CODES = /* @__PURE__ */ new Set([
+	"provider_quota_exhausted",
+	"provider_quota_exceeded",
+	"provider_rate_limit",
+	"upstream_unavailable",
+	"provider_key_invalid",
+	"rate_limit_exceeded",
+	"rate_limit_error",
+	"overloaded_error",
+	"capacity_exhausted",
+	"host_pressure",
+	"provisioning_paused"
+]);
+/** 429 Too Many Requests, 503 Service Unavailable, and 529, which Anthropic uses for overload. */
+const UNAVAILABLE_STATUSES = /* @__PURE__ */ new Set([
+	429,
+	503,
+	529
+]);
+/** Legacy text fallback reads whole code tokens and explicitly framed HTTP statuses. */
+function unavailableSignalInText(text) {
+	for (const token of text.toLowerCase().matchAll(/[a-z_]+/gu)) if (UNAVAILABLE_CODES.has(token[0])) return token[0];
+	const status = printedStatus(text);
+	return status !== void 0 && UNAVAILABLE_STATUSES.has(status) ? `http-${status}` : void 0;
+}
+/** The HTTP status a harness printed in its `status code <n>` framing, if any. */
+const printedStatus = (text) => {
+	const status = text.match(/\bstatus code (\d{3})\b/u)?.[1];
+	return status === void 0 ? void 0 : Number(status);
+};
+/** Held room for an otherwise placeable shape is temporary capacity; oversized shapes stay refused. */
+const HELD_ROOM_REFUSAL = /\bits room is held placeable\b/u;
+/**
+* The code or status that marks a failed turn outcome as an upstream capacity refusal, or
+* `undefined`. The outcome's own `errorCode` decides first, with Sandbox's held-room text beside its
+* code; other text is read only when no code or numeric status decided, because a harness CLI can
+* report the router's refusal as text.
+*/
+function unavailableSignalOfFailure(failure) {
+	const typed = turnFailureOf(failure);
+	if (typed) return turnFailurePolicy(typed).classification === "unavailable" ? typed.code : void 0;
+	const code = failure.errorCode?.toLowerCase();
+	if (code !== void 0 && UNAVAILABLE_CODES.has(code)) return code;
+	if (code === "no_host_fits_shape" && HELD_ROOM_REFUSAL.test(failure.error)) return "host-room-held";
+	if (failure.statusCode !== void 0) return UNAVAILABLE_STATUSES.has(failure.statusCode) ? `http-${failure.statusCode}` : void 0;
+	return unavailableSignalInText(failure.error);
+}
+const DEFAULT_UNAVAILABLE_PAUSE_MS = 15e3;
+const DEFAULT_MAX_UNAVAILABLE_PAUSE_MS = 3e5;
+/**
+* The pause after the `consecutive`-th refusal in a row (1-based): the first pause, doubled per
+* earlier refusal, up to the ceiling. The one rule for a driver that re-enters and a leaf that
+* continues in its environment, so an outage costs both the same number of turns.
+*/
+function unavailablePauseMs(consecutive, policy = {}) {
+	return cappedDoublingMs(consecutive, policy.unavailablePauseMs ?? DEFAULT_UNAVAILABLE_PAUSE_MS, policy.maxUnavailablePauseMs ?? DEFAULT_MAX_UNAVAILABLE_PAUSE_MS);
+}
+/** `first` doubled per earlier consecutive wait (`consecutive` is 1-based), up to `ceiling`. */
+function cappedDoublingMs(consecutive, first, ceiling) {
+	const start = Math.max(0, first);
+	return Math.min(Math.max(start, ceiling), start * 2 ** Math.max(0, consecutive - 1));
+}
+/** The longest hold a refusal's own reset time may ask for: a 5-hour plan window plus a margin. */
+const MAX_RESET_HOLD_MS = 216e5;
+/** How often a refusal whose reset is beyond {@link MAX_RESET_HOLD_MS} is probed again. */
+const FAR_RESET_PROBE_MS = 36e5;
+/** Read canonical reset/retry-after before legacy structured reset fields; never parse text. */
+function reportedResetAt(error, nowMs = Date.now()) {
+	const typed = turnFailureOf(error);
+	if (typed) return typed.resetAt !== void 0 ? Date.parse(typed.resetAt) : typed.retryAfterMs !== void 0 ? nowMs + typed.retryAfterMs : void 0;
+	for (const cause of causeChain(error)) {
+		let value;
+		try {
+			value = Reflect.get(cause, "resetAt");
+		} catch {
+			continue;
+		}
+		const at = typeof value === "number" ? value : typeof value === "string" ? Date.parse(value) : NaN;
+		if (Number.isFinite(at)) return at;
+	}
+}
+/**
+* Until when a reported reset holds a pause, or `undefined` for none (absent or past: the caller
+* keeps its doubling pause). A reset more than MAX_RESET_HOLD_MS ahead is held FAR_RESET_PROBE_MS
+* at a time; on magnetar-rust-20261019c a far reset drew about 12 attempts an hour.
+*/
+function unavailableResumeAt(resetAt, nowMs) {
+	if (resetAt === void 0 || resetAt <= nowMs) return void 0;
+	return resetAt - nowMs > MAX_RESET_HOLD_MS ? nowMs + FAR_RESET_PROBE_MS : resetAt;
+}
+/**
+* Spread a wait over `[ms / 2, ms]`. Every driver a Platform restart cut off fails within the same
+* seconds; without jitter their doubling schedules stay aligned and they all re-enter together
+* when the service returns. `random` returns a value in `[0, 1)`; 0 keeps the full wait.
+*/
+function jitteredMs(ms, random) {
+	return ms - Math.floor(ms / 2 * Math.min(1, Math.max(0, random())));
+}
+// src/runtime/supervise/retained-executor.ts
+/** Scope owns the durable writer; provider executors only publish sanitized admissions. */
+const retainedExecutorSeamKey = "runtime.retainedExecutor";
+/** @internal A capture may finish after cancellation; its durable citation remains appendable. */
+function executorEvidenceWriter(args) {
+	const traceRoots = args.traceRoots ?? traceRootWriter(args.blobs, args.nodeId);
+	return async (out) => {
+		const snapshot = detachedSnapshot(out, "executor evidence");
+		const outRef = contentAddress(snapshot);
+		await args.blobs.put(outRef, snapshot);
+		const traceRoot = await traceRoots.writeEvidence(outRef, snapshot);
+		await args.journal.appendEvent(args.rootId, {
+			kind: "execution-evidence",
+			id: args.nodeId,
+			outRef,
+			...traceRoot === void 0 ? {} : { traceRoot },
+			seq: args.nextSequence(),
+			at: new Date(args.now()).toISOString()
+		});
+	};
+}
+function retainedExecutorContext(ctx) {
+	return ctx.seams[retainedExecutorSeamKey];
+}
+const causeMessages = {
+	unobservable: "retained provider execution requires reconciliation before replacement",
+	"provider-contract": "retained provider response violated its contract; original execution remains unresolved",
+	"request-rejected": "retained provider execution was refused before it ran; nothing to reconcile",
+	transport: "retained provider execution lost its transport; status in doubt",
+	"nested-recovery": "retained nested execution requires recovery before replacement"
+};
+/**
+* agent-provider-tangle's `TangleDispatchNotAdmittedError` (since 3.6.11): Sandbox answered a
+* dispatch with `dispatched: false` and named another execution that owns the session or turn.
+* Nothing ran for the request.
+*/
+const DISPATCH_NOT_ADMITTED_CODE = "DISPATCH_NOT_ADMITTED";
+/**
+* agent-provider-tangle's `TangleDispatchExecutionChangedError` (since 5.0.8): Sandbox CONFIRMED
+* the dispatch but named an execution id other than the requested run's. The provider's own
+* answer violates its contract, identically on every retry (agent-sdk #475: 107 retries over
+* 39 minutes, all classed transient, before the run settled all-children-down).
+*/
+const DISPATCH_EXECUTION_CHANGED_CODE = "DISPATCH_EXECUTION_CHANGED";
+/**
+* The Sandbox SDK's codes for a box that cannot be provisioned for this profile, by the HTTP status
+* each is sent with: a mount outside the box's writable roots and a materialization that would fail
+* the same way again (422), a mounted file changed on both sides since the last mount (409). Two
+* bare 500s are read by text: that conflict before Sandbox typed it, and two mounts of one target
+* (magnetar-rust-sandbox-20261031g's and 20261031h's managers retried them every turn). On run
+* queens21-h22-capture-root-1-20261019c 154 attempts across 4 workers retried a read-only mount of
+* `/work/queens21_count.c` as a lost transport. The same codes at another status may be transient.
+*/
+const PROVISIONING_REFUSALS = /* @__PURE__ */ new Map([
+	["PROFILE_FILE_MOUNT_OUTSIDE_ROOTS", 422],
+	["PROFILE_FILES_MATERIALIZE_FAILED", 422],
+	["PROFILE_FILE_CONFLICT", 409]
+]);
+const TEXT_REFUSALS = /Refusing to replace existing profile file: |Duplicate profile file target: /u;
+/** True for an error that is itself a deterministic provisioning refusal (see above). */
+const isProvisioningRefusal = (value) => refusedAs(PROVISIONING_REFUSALS, value) || value instanceof Error && TEXT_REFUSALS.test(errorProperty(value, "message") ?? "");
+/**
+* Platform refusals the orchestrator answers BEFORE it forwards a dispatch, by machine code and
+* the HTTP status it is sent with. Run 002f69d5: `HUB_CREDENTIAL_REFRESH_FAILED` at 503 left no
+* effect, yet read as a lost transport. Any other 5xx stays a transport failure, in doubt.
+*/
+const PLATFORM_PREDISPATCH_REFUSALS = /* @__PURE__ */ new Map([["HUB_CREDENTIAL_REFRESH_FAILED", 503]]);
+/** True for an error that is itself a named platform refusal of a dispatch (see above). */
+const isPlatformPredispatchRefusal = (value) => refusedAs(PLATFORM_PREDISPATCH_REFUSALS, value);
+/** True when `value` carries one of `refusals`' codes at the status that code is sent with. */
+function refusedAs(refusals, value) {
+	try {
+		const code = readString(value, "code");
+		const status = readNumber(value, "status") ?? readNumber(value, "statusCode");
+		const expected = code === void 0 ? void 0 : refusals.get(code);
+		return expected !== void 0 && expected === status;
+	} catch {
+		return false;
+	}
+}
+/** The contract-error codes that wrap a failed READ rather than name a broken answer. */
+const readFailureCodes = /* @__PURE__ */ new Set(["RETAINED_RESULT_READ_FAILED", "RETAINED_CONTROL_REF_READ_FAILED"]);
+/** Socket-level failures, by the codes Node and undici assign, plus the Sandbox SDK's own. */
+const TRANSPORT_ERROR_CODES = /* @__PURE__ */ new Set([
+	"ECONNRESET",
+	"ECONNREFUSED",
+	"ETIMEDOUT",
+	"ENOTFOUND",
+	"EAI_AGAIN",
+	"EPIPE",
+	"UND_ERR_SOCKET",
+	"UND_ERR_CONNECT_TIMEOUT",
+	"UND_ERR_HEADERS_TIMEOUT",
+	"UND_ERR_BODY_TIMEOUT",
+	"NETWORK_ERROR"
+]);
+/** Refused by a schema or bound, the same way every attempt: agent-provider-tangle's JsonBoundError
+*  (#1204's exhibit 6) or the Sandbox SDK refusing a capability document as HTTP 502, which
+*  institutional-compiler-20261031c:s14 retried 44 times as a lost transport. */
+function isSchemaRejection(value) {
+	const code = readString(value, "code");
+	return readString(value, "name") === "ZodError" || Array.isArray(Reflect.get(value, "issues")) || code === "JSON_BOUND_VIOLATION" || code === "INVALID_CAPABILITY_DOCUMENT";
+}
+function readNumber(value, key) {
+	const read = Reflect.get(value, key);
+	return typeof read === "number" && Number.isFinite(read) ? read : void 0;
+}
+function readString(value, key) {
+	const read = Reflect.get(value, key);
+	return typeof read === "string" ? read : void 0;
+}
+const credentialAdmissionRefusals = /* @__PURE__ */ new WeakSet();
+/**
+* Walk the cause chain (bounded, cycle-safe) and name the first cause whose structure decides.
+*
+* `phase` says whether a 4xx or a client deadline can mean "refused before it ran": only at
+* admission. After admission the same status means the provider cannot resolve what it
+* admitted, and the honest name is the refusal.
+*/
+function classifyRetainedPendingCause(cause, phase = "execution", onCredentialRefusal) {
+	const seen = /* @__PURE__ */ new Set();
+	const queue = [{
+		value: cause,
+		phase
+	}];
+	let steps = 0;
+	while (queue.length > 0 && steps < 12) {
+		steps += 1;
+		const { value, phase: at } = queue.shift();
+		if (typeof value !== "object" || value === null || seen.has(value)) continue;
+		seen.add(value);
+		if (value instanceof RetainedExecutionPendingError) {
+			if (credentialAdmissionRefusals.has(value)) {
+				if (at === "execution") return "unobservable";
+				onCredentialRefusal?.();
+			}
+			return value.pendingCause;
+		}
+		const name = readString(value, "name");
+		const code = readString(value, "code");
+		const status = readNumber(value, "status") ?? readNumber(value, "statusCode");
+		if (name === "RetainedRunProviderContractError") {
+			if (code === void 0 || !readFailureCodes.has(code)) return "provider-contract";
+			queue.unshift({
+				value: Reflect.get(value, "cause"),
+				phase: "execution"
+			});
+			continue;
+		}
+		if (isSchemaRejection(value)) return at === "admission" ? "request-rejected" : "provider-contract";
+		if (code === "DISPATCH_NOT_ADMITTED") return at === "admission" ? "request-rejected" : "provider-contract";
+		if (code === "DISPATCH_EXECUTION_CHANGED") return "provider-contract";
+		if (isProvisioningRefusal(value)) return "request-rejected";
+		if (isCredentialRefusal(value)) {
+			if (at === "execution") return "unobservable";
+			onCredentialRefusal?.();
+			return "request-rejected";
+		}
+		if (code !== void 0 && TRANSPORT_ERROR_CODES.has(code)) return "transport";
+		if (at === "admission" && isPlatformPredispatchRefusal(value)) return "request-rejected";
+		if (name === "NetworkError" || name === "ServerError") return "transport";
+		if (status === void 0 && at === "admission" && code !== void 0 && UNAVAILABLE_CODES.has(code.toLowerCase())) return "request-rejected";
+		if (status !== void 0) {
+			if (status >= 500) return "transport";
+			if (at === "admission" && status !== 408) return "request-rejected";
+			return "unobservable";
+		}
+		const errors = Reflect.get(value, "errors");
+		if (Array.isArray(errors)) for (const member of errors) queue.push({
+			value: member,
+			phase: at
+		});
+		queue.push({
+			value: Reflect.get(value, "cause"),
+			phase: at
+		});
+	}
+	return "unobservable";
+}
+/**
+* Local observation stopped; the retained provider execution has no accepted terminal result.
+*
+* The message names WHICH of the situations in {@link RetainedPendingCause} this is, and the
+* `pendingCause` field carries it as a value the settlement records, so a reader never splits
+* the population on the message's wording. The cause chain is kept for the `caused by` receipt.
+*/
+var RetainedExecutionPendingError = class extends Error {
+	pendingCause;
+	phase;
+	constructor(cause, pendingCause = "execution") {
+		let credentialRefused = false;
+		const resolved = pendingCause === "admission" || pendingCause === "execution" ? classifyRetainedPendingCause(cause, pendingCause, () => {
+			credentialRefused = true;
+		}) : pendingCause;
+		super(causeMessages[resolved], { cause });
+		this.name = "RetainedExecutionPendingError";
+		this.pendingCause = resolved;
+		this.phase = pendingCause === "admission" ? "admission" : "execution";
+		if (credentialRefused) credentialAdmissionRefusals.add(this);
+	}
+};
+/** The instruction a keyed continuation runs in the held session: the node's task is unchanged,
+*  and its conversation and workspace are where the budget stop left them. */
+const BUDGET_CONTINUATION_TASK = "Your previous turn reached its budget and stopped. Your manager gave you more budget to continue the same task in the same session: your conversation so far and the files in your workspace are where you left them. Continue from where you stopped. Do not start over.";
+/** The execution id of a leaf's later invocation, derived from its `execution-input` sequence so
+*  a recovery derives the same one. A first invocation keeps the node id. */
+function leafContinuationExecutionId(nodeId, inputSeq) {
+	return `${nodeId}:input:${inputSeq}`;
+}
+const retainedPreparations = /* @__PURE__ */ new WeakMap();
+/** Reconstruct an admitted worker through its original composition boundary. @internal */
+function registerRetainedExecutorPreparation(factory, prepare) {
+	retainedPreparations.set(factory, prepare);
+	return factory;
+}
+function prepareRetainedExecutor(factory, input) {
+	return retainedPreparations.get(factory)?.(input);
+}
+// src/runtime/failure-cause.ts
+const MAX_CAUSE_CHARS = 2048;
+const MACHINE_CODE_PATTERN = /^[A-Za-z][A-Za-z0-9_.-]{0,63}$/u;
+/** @internal Canonical producer-supplied remediation, shared by transport and read models. */
+const runtimeFailureRemediationSchema = z.object({
+	cause: z.enum([
+		"api_key_selected",
+		"provider_unresolved",
+		"subscription_unverified",
+		"not_authenticated"
+	]),
+	fix: z.string().min(1).max(256),
+	harness: z.string().min(1).max(64),
+	provider: z.string().min(1).max(128).nullable()
+});
+/** @internal Validate Runtime-owned failure values on observation transports. */
+const runtimeFailureCauseSchema = z.object({
+	code: z.enum([
+		"aborted",
+		"deadline-exceeded",
+		"budget-exhausted",
+		"credential-refused",
+		"request-rejected",
+		"upstream-unavailable",
+		"transport",
+		"provider-contract",
+		"retained-unobservable",
+		"nested-recovery",
+		"platform",
+		"work-failed",
+		"unknown"
+	]),
+	owner: z.enum([
+		"provider",
+		"platform",
+		"runtime",
+		"work",
+		"caller",
+		"unknown"
+	]),
+	cause: z.string().max(MAX_CAUSE_CHARS),
+	/** The upstream or provider machine code the failure carried, when it carried one. */
+	providerCode: z.string().regex(MACHINE_CODE_PATTERN).optional(),
+	/** The HTTP status the provider's typed error carried with that code. */
+	providerStatus: z.number().int().min(100).max(599).optional(),
+	/** The provider's typed retry-after hint, in milliseconds. A hint, never an automatic retry. */
+	retryAfterMs: z.number().int().nonnegative().optional(),
+	remediation: runtimeFailureRemediationSchema.readonly().optional()
+}).readonly();
+const retainedFailures = {
+	unobservable: {
+		code: "retained-unobservable",
+		owner: "provider"
+	},
+	"provider-contract": {
+		code: "provider-contract",
+		owner: "provider"
+	},
+	"request-rejected": {
+		code: "request-rejected",
+		owner: "caller"
+	},
+	transport: {
+		code: "transport",
+		owner: "platform"
+	},
+	"nested-recovery": {
+		code: "nested-recovery",
+		owner: "runtime"
+	}
+};
+function read(value, key) {
+	try {
+		return Reflect.get(value, key);
+	} catch {
+		return;
+	}
+}
+const UNATTRIBUTED = {
+	code: "unknown",
+	owner: "unknown"
+};
+/** One link's own structure: budget refusal, credential refusal, machine code, HTTP status. */
+function structuralFailure(link) {
+	if (link instanceof ReservationWaitRefused || read(link, "reason") === "budget-exhausted") return {
+		code: "budget-exhausted",
+		owner: "caller"
+	};
+	const code = upstreamMachineCode([link]);
+	if (isCredentialRefusal(link) || code === "SEAT_NOT_LOGGED_IN") return {
+		code: "credential-refused",
+		owner: "caller"
+	};
+	const status = read(link, "status") ?? read(link, "statusCode");
+	if (code === "MODEL_NOT_FOUND") return {
+		code: "request-rejected",
+		owner: "caller"
+	};
+	if (typeof code === "string" && UNAVAILABLE_CODES.has(code.toLowerCase())) return {
+		code: "upstream-unavailable",
+		owner: "platform"
+	};
+	if (typeof status === "number" && Number.isInteger(status)) {
+		if (UNAVAILABLE_STATUSES.has(status)) return {
+			code: "upstream-unavailable",
+			owner: "platform"
+		};
+		if (status >= 500 || status === 0 || status === 408) return {
+			code: "transport",
+			owner: "platform"
+		};
+		if (status === 401 || status === 403) return {
+			code: "credential-refused",
+			owner: "caller"
+		};
+		if (status >= 400) return {
+			code: "request-rejected",
+			owner: "caller"
+		};
+	}
+	if (typeof code === "string" && TRANSPORT_ERROR_CODES.has(code)) return {
+		code: "transport",
+		owner: "platform"
+	};
+	if (typeof code === "string" && PLATFORM_FAILURE_CODES.has(code.toLowerCase())) return {
+		code: "platform",
+		owner: "platform"
+	};
+	const name = read(link, "name");
+	if (name === "NetworkError" || name === "ServerError") return {
+		code: "transport",
+		owner: "platform"
+	};
+}
+/** @internal The same machine-code validation used by public failure values. */
+function runtimeProviderCode(value) {
+	return typeof value === "string" && MACHINE_CODE_PATTERN.test(value) ? value : void 0;
+}
+function upstreamMachineCode(links) {
+	const typed = links.map(turnFailureOf).find((value) => value !== void 0);
+	if (typed) return runtimeProviderCode(typed.code);
+	return [
+		"upstreamCode",
+		"errorCode",
+		"code"
+	].flatMap((field) => links.map((link) => runtimeProviderCode(read(link, field)))).find((code) => code !== void 0);
+}
+/** The typed HTTP status and retry-after of the link carrying the provider's code. */
+function upstreamResponse(links, providerCode) {
+	const typed = links.map(turnFailureOf).find((value) => value !== void 0);
+	if (typed?.retryAfterMs !== void 0) return { retryAfterMs: typed.retryAfterMs };
+	const link = links.find((each) => [
+		"upstreamCode",
+		"errorCode",
+		"code"
+	].some((field) => read(each, field) === providerCode));
+	if (providerCode === void 0 || link === void 0) return {};
+	const status = read(link, "status") ?? read(link, "statusCode");
+	const retryAfterMs = read(link, "retryAfterMs");
+	return {
+		...Number.isInteger(status) && status >= 100 && status <= 599 ? { providerStatus: status } : {},
+		...Number.isInteger(retryAfterMs) && retryAfterMs >= 0 ? { retryAfterMs } : {}
+	};
+}
+/**
+* Classify a thrown failure. Pass the caller's signal so a cancellation the caller asked for is
+* attributed to the caller even when the provider surfaced it as an ordinary error, and say when
+* the operation's own deadline expired so a blown deadline is never reported as a cancellation.
+*/
+function runtimeFailureCause(error, context = {}) {
+	const cause = errMessage(error).slice(0, MAX_CAUSE_CHARS);
+	const caller = context.signal?.aborted ? "aborted" : context.deadlineExpired ? "deadline-exceeded" : void 0;
+	try {
+		const links = causeChain(error);
+		const providerCode = upstreamMachineCode(links);
+		const upstream = links.find((link) => link instanceof BackendTransportError && link.backend === "bridge" && link.status === 403 && link.upstreamCode === "subscription_required" && link.providerDispatch === "not_started");
+		const remedy = runtimeFailureRemediationSchema.readonly().safeParse(upstream?.remediation);
+		const failure = ({ code, owner }) => ({
+			code,
+			owner,
+			cause,
+			...providerCode === void 0 ? {} : { providerCode },
+			...upstreamResponse(links, providerCode),
+			...code === "credential-refused" && providerCode === "subscription_required" && remedy.success ? { remediation: remedy.data } : {}
+		});
+		if (caller !== void 0) return failure({
+			code: caller,
+			owner: "caller"
+		});
+		for (const link of links) {
+			if (link instanceof RetainedExecutionPendingError && link.pendingCause === "provider-contract") return failure(retainedFailures["provider-contract"]);
+			if (read(link, "name") === "RetainedRunProviderContractError") return failure(retainedFailures[classifyRetainedPendingCause(link)]);
+		}
+		const typed = error instanceof AgentEvalError && !(error instanceof BackendTransportError) ? void 0 : turnFailureOf(error);
+		if (typed) return failure(turnFailurePolicy(typed));
+		if (context.signal === void 0 && links.some((link) => read(link, "name") === "AbortError")) return failure({
+			code: "aborted",
+			owner: "caller"
+		});
+		for (const link of links) {
+			if (link instanceof RetainedExecutionPendingError) {
+				if (link.pendingCause === "request-rejected" && links.some(isPlatformPredispatchRefusal)) return failure({
+					code: "request-rejected",
+					owner: "platform"
+				});
+				return failure(retainedFailures[link.pendingCause]);
+			}
+			if (read(link, "name") === "RetainedRunProviderContractError") return failure(retainedFailures[classifyRetainedPendingCause(link)]);
+		}
+		for (const link of links) {
+			const classified = structuralFailure(link);
+			if (classified !== void 0) return failure(classified);
+		}
+		return failure(UNATTRIBUTED);
+	} catch {
+		return {
+			...caller === void 0 ? UNATTRIBUTED : {
+				code: caller,
+				owner: "caller"
+			},
+			cause
+		};
+	}
+}
+/**
+* Classify a failure the execution reported without throwing — a Sandbox outcome or executor
+* envelope with `success: false` — from its machine code and HTTP status. A harness that reports
+* a failure with neither does not say who must act, so it is `unknown`, never the work's fault.
+*/
+function reportedFailureCause(outcome) {
+	return runtimeFailureCause(Object.assign(new Error(outcome.error ?? "execution reported a failure"), {
+		errorCode: outcome.errorCode,
+		statusCode: outcome.statusCode,
+		failure: outcome.failure
+	}));
+}
+/**
+* Classify a down settlement from the typed facts Runtime recorded while the cause was still a
+* value: the retained cause, the failure classified where the executor threw, then `infra: false`,
+* the throw path's statement that the work itself failed. `infra: true` is not an owner: Runtime
+* also sets it for cancellations, budget reconcile faults and validation errors, and from the
+* platform's failure messages, so a settlement with nothing else typed is `unknown`.
+*/
+function settlementFailureCause(down) {
+	const cause = errMessage(down.reason).slice(0, MAX_CAUSE_CHARS);
+	if (down.retainedPendingCause !== void 0) {
+		const retained = retainedFailures[down.retainedPendingCause];
+		if (down.failure !== void 0 && down.failure.code === retained.code) return {
+			...down.failure,
+			cause
+		};
+		return {
+			...retained,
+			cause,
+			...down.failure?.providerCode === void 0 ? {} : { providerCode: down.failure.providerCode }
+		};
+	}
+	if (down.failure !== void 0 && down.failure.code !== "unknown") return {
+		...down.failure,
+		cause
+	};
+	return {
+		...down.infra === false ? {
+			code: "work-failed",
+			owner: "work"
+		} : UNATTRIBUTED,
+		cause,
+		...down.failure?.providerCode === void 0 ? {} : { providerCode: down.failure.providerCode }
+	};
+}
+export { assertValidBudget as $, TRACE_SUMMARY_SCHEMA as A, credentialCommandExit as B, jitteredMs as C, parseCodexUsageRecord as Ct, unavailableResumeAt as D, unavailablePauseMs as E, executorFailureInfra as F, budgetRecoverySeeds as G, BudgetReconcileFault as H, executorFailureReason as I, refreshBudgetLease as J, completedLeafBacking as K, turnFailureOf as L, contentAddress as M, contentRef as N, unavailableSignalOfFailure as O, executorFailure as P, spendFromUsageTotals as Q, turnFailurePolicy as R, cappedDoublingMs as S, decodeHarnessUsage as St, reportedResetAt as T, budgetLeaseUpdates as U, isCredentialRefusal as V, budgetLeases as W, newUsageTotals as X, meterUsageEvent as Y, spendFromUsageEvents as Z, registerRetainedExecutorPreparation as _, notifySandboxEventObserver as _t, runtimeProviderCode as a, sandboxOutputMarker as at, UNAVAILABLE_CODES as b, sandboxTerminalUsageField as bt, DISPATCH_EXECUTION_CHANGED_CODE as c, canonicalStreamEventFromSandboxEvent as ct, TRANSPORT_ERROR_CODES as d, assertSandboxServedModel as dt, assertValidSpend as et, executorEvidenceWriter as f, canonicalSandboxUsageMode as ft, prepareRetainedExecutor as g, isSandboxTerminalEvent as gt, leafContinuationExecutionId as h, extractLlmCallEvent as ht, runtimeFailureRemediationSchema as i, sandboxLeafOutputFromEvents as it, traceRootWriter as j, TRACE_ROOT_SCHEMA as k, DISPATCH_NOT_ADMITTED_CODE as l, extractTransportEventIdentity as lt, isSchemaRejection as m, createSandboxUsageLedger as mt, runtimeFailureCause as n, mapSandboxEvent as nt, settlementFailureCause as o, sandboxProgressEvents as ot, isProvisioningRefusal as p, createSandboxTurnEventCollector as pt, createBudgetPool as q, runtimeFailureCauseSchema as r, mapSandboxToolEvent as rt, BUDGET_CONTINUATION_TASK as s, terminalTextFromSandboxEvent as st, reportedFailureCause as t, createSandboxToolPartState as tt, RetainedExecutionPendingError as u, parseCanonicalTransportEvent as ut, retainedExecutorContext as v, sameModelId as vt, printedStatus as w, recordValue as wt, UNAVAILABLE_STATUSES as x, sumSandboxUsage as xt, retainedExecutorSeamKey as y, sandboxEventServedBackend as yt, hashJson as z };
+
+//# sourceMappingURL=failure-cause-BzjUUsRz.js.map