@tangle-network/agent-runtime 6.0.7 → 7.0.0

package/dist/{scope-BF3RUg3U.js → supervisor-accounting-DxLQ_TQe.js}

@@ -1,9 +1,9 @@
 import { c as RetainedInteractiveAdmissionError, d as RetainedRunDispatchBindingError, f as RuntimeRunStateError, l as RetainedInteractiveBindingError, m as ValidationError, u as RetainedRunAdmissionError } from "./errors-AzSuGI23.js";
 import { A as withBudgetResources, B as singleFlightTeardown, C as unreportedSpend, D as addResourceSpend, I as armDeadlineTimer, L as boundedChildDeadlineAt, M as CHILD_DEADLINE_REASON, R as checkInIdleMs, T as zeroSpend, V as teardownExecutor, a as cloneSpend, c as errorMessage, f as isAsyncIterable, i as chargedTokens, k as resourceTelemetry, n as addSpend, o as cloneTokenUsage, t as abortError, v as sleep } from "./util-C_cdPNC4.js";
-import { $ as assertValidBudget, F as executorFailureInfra, G as budgetRecoverySeeds, H as BudgetReconcileFault, I as executorFailureReason, J as refreshBudgetLease, K as completedLeafBacking, M as contentAddress, P as executorFailure, Q as spendFromUsageTotals, U as budgetLeaseUpdates, W as budgetLeases, X as newUsageTotals, Y as meterUsageEvent, et as assertValidSpend, f as executorEvidenceWriter, g as prepareRetainedExecutor, h as leafContinuationExecutionId, j as traceRootWriter, lt as extractTransportEventIdentity, n as runtimeFailureCause, o as settlementFailureCause, q as createBudgetPool, s as BUDGET_CONTINUATION_TASK, t as reportedFailureCause, u as RetainedExecutionPendingError, ut as parseCanonicalTransportEvent, wt as recordValue, y as retainedExecutorSeamKey } from "./failure-cause-BzjUUsRz.js";
+import { $ as assertValidBudget, F as executorFailureInfra, G as budgetRecoverySeeds, H as BudgetReconcileFault, I as executorFailureReason, J as refreshBudgetLease, K as completedLeafBacking, M as contentAddress, P as executorFailure, Q as spendFromUsageTotals, U as budgetLeaseUpdates, W as budgetLeases, X as newUsageTotals, Y as meterUsageEvent, et as assertValidSpend, f as executorEvidenceWriter, g as prepareRetainedExecutor, h as leafContinuationExecutionId, j as traceRootWriter, lt as extractTransportEventIdentity, n as runtimeFailureCause, o as settlementFailureCause, q as createBudgetPool, s as BUDGET_CONTINUATION_TASK, t as reportedFailureCause, u as RetainedExecutionPendingError, ut as parseCanonicalTransportEvent, wt as recordValue, y as retainedExecutorSeamKey } from "./failure-cause-rJTm_Tx8.js";
 import { a as errMessage, c as errorText, d as resolveRedactor, l as defaultRedactor, n as detachedSnapshot, r as shareParsedStrings } from "./snapshot-Cgj2Wzi6.js";
 import { t as assertExecutableAgentProfile } from "./model-policy-JOcg3NRs.js";
-import { a as readCommittedJsonLines, c as appendCommittedJsonLine, l as sha256, r as prepareJsonlAppend, s as withJsonlFileLock, t as isNoEntError } from "./jsonl-file-BeUa5EDx.js";
+import { a as readCommittedJsonLines, c as appendCommittedJsonLine, l as sha256, r as prepareJsonlAppend, s as withJsonlFileLock, t as isNoEntError } from "./jsonl-file-DsxVI0E_.js";
 import { F as deepFreezeCandidate, h as workspaceLimits, i as readAgentCandidateWorkspaceArtifactFiles, j as verifiedArtifactChunks, m as safeArchivePath, z as sha256Bytes$1 } from "./workspace-streams-B7yNMahl.js";
 import { a as writeAtomicDurableFile, n as assertNoSymlinkDescendant, o as captureRunWriteContext, r as publishExclusiveDurableFile, s as fenceRunWrite, t as appendDurableFile } from "./durable-file-DstVeHcj.js";
 import { a as withPursuitContext, i as notifyRuntimeHookEvent } from "./runtime-hooks-CsW2pfFk.js";
@@ -9139,14 +9139,19 @@ function overBudget(budget, spent) {
 	return budget.maxTokens !== void 0 && chargedTokens(spent.tokens) > budget.maxTokens || budget.maxIterations !== void 0 && spent.iterations > budget.maxIterations || budget.maxUsd !== void 0 && spent.usdKnown !== false && spent.usd > budget.maxUsd;
 }
 // src/durable/spawn-journal/record-events.ts
-/** Decode the file journal's historical single-event and atomic-group envelopes. @internal */
-function spawnJournalRecordEvents(record) {
-	if (!isRecord(record)) throw new Error("spawn journal corrupted: record must be an object");
+/** Decode historical envelopes; readers own event validation. @internal */
+function spawnJournalRecordEvents(record, invalid = "throw") {
+	const corrupt = (reason) => {
+		if (invalid === "skip") return [];
+		throw new Error(`spawn journal corrupted: ${reason}`);
+	};
+	if (!isRecord(record)) return corrupt("record must be an object");
 	if (record.kind === "begin") return [];
-	if (record.kind === "event") return [record.event];
-	if (record.kind !== "events") throw new Error(`spawn journal corrupted: unknown record kind '${String(record.kind)}'`);
-	if (!Array.isArray(record.events)) throw new Error("spawn journal group has no events array");
-	return record.events;
+	const single = record.kind === "event" || record.kind === void 0 && "event" in record;
+	if (!single && record.kind !== "events") return corrupt(`unknown record kind '${String(record.kind)}'`);
+	const events = single ? [record.event] : record.events;
+	if (!Array.isArray(events)) return corrupt("group has no events array");
+	return events;
 }
 // src/durable/spawn-journal/journal-store.ts
 /**
@@ -11088,47 +11093,6 @@ function maxSeqOf(events, pred) {
 function reservedCursorFloor(events) {
 	return Math.max(maxSeqOf(events, closesCursorSlot), events.reduce((max, event) => event.kind === "reconciled" && event.settledSeq !== void 0 ? Math.max(max, event.settledSeq) : max, -1));
 }
-/** Durable measured costs plus conservative unmeasured ceilings and remaining backing.
-* Unknown flags distinguish those charges from observed spend. */
-function sumSpendFromEvents(events) {
-	const totals = sumMeasuredSpendFromEvents(events);
-	const rootBudget = events.find((event) => event.kind === "spawned" && event.parent === void 0)?.budget;
-	let remainingRootTokens = Math.max(0, (rootBudget?.maxTokens ?? 0) - chargedTokens(totals.childWork.tokens) - chargedTokens(totals.driverInference.tokens));
-	let remainingRootIterations = Math.max(0, (rootBudget?.maxIterations ?? 0) - totals.childWork.iterations - totals.driverInference.iterations);
-	let remainingRootUsd = Math.max(0, (rootBudget?.maxUsd ?? 0) - totals.childWork.usd - totals.driverInference.usd);
-	for (const budget of uncertainSpawnBudgets(events)) {
-		const unknown = withBudgetResources(zeroSpend(), budget);
-		Object.assign(totals.childWork, addResourceSpend(totals.childWork.resources, unknown.resources));
-		const iterationCharge = budget.maxIterations ?? remainingRootIterations;
-		totals.childWork.iterations += iterationCharge;
-		remainingRootIterations = Math.max(0, remainingRootIterations - iterationCharge);
-		const tokenCharge = budget.maxTokens ?? remainingRootTokens;
-		totals.childWork.tokens.input += tokenCharge;
-		remainingRootTokens = Math.max(0, remainingRootTokens - tokenCharge);
-		totals.childWork.tokensKnown = false;
-		const usdCharge = budget.maxUsd ?? (rootBudget?.maxUsd !== void 0 ? remainingRootUsd : 0);
-		totals.childWork.usd += usdCharge;
-		totals.childWork.usdKnown = false;
-		remainingRootUsd = Math.max(0, remainingRootUsd - usdCharge);
-	}
-	for (const { budget: held } of heldSpawnBudgets(events)) totals.childWork = addSpend(totals.childWork, {
-		...zeroSpend(),
-		iterations: held.maxIterations ?? 0,
-		tokens: {
-			input: held.maxTokens ?? 0,
-			output: 0
-		},
-		tokensKnown: (held.maxTokens ?? 0) === 0,
-		usd: held.maxUsd ?? 0,
-		usdKnown: (held.maxUsd ?? 0) === 0,
-		...held.resources === void 0 ? {} : { resources: Object.fromEntries(Object.entries(held.resources).map(([name, value]) => [name, {
-			unit: value.unit,
-			amount: value.limit,
-			known: value.limit === 0
-		}])) }
-	});
-	return totals;
-}
 function sumMeasuredSpendFromEvents(events, ownerId) {
 	const budgets = new Map(events.flatMap((event) => event.kind === "spawned" ? [[event.id, event.budget]] : []));
 	let childWork = zeroSpend();
@@ -13762,6 +13726,333 @@ async function recoverRetainedChildren(args, children, spawn, next) {
 		throw error;
 	}
 }
-export { hasRetriableTeardowns as $, readBoundHarnessSessions as $n, linkAbort as $r, FileResultBlobStore as $t, isTraceAnalysisStore as A, mergeTraceEnv as An, recordRuntimeOwnedProviderModel as Ar, scopeOwnerExecutorNodeContext as At, FileSpawnJournal as B, createRuntimeEventCollector as Bn, executableAgentProfileSnapshot as Br, scopeRetainedOwnerRestorePoint as Bt, writeWorkerSteerAcknowledgement as C, verifyObserverRecords as Cn, knownMaterializationReceipt as Cr, scopeRetainedOwnerResult as Ct, prepareScopeResume as D, workerTraceEnv as Dn, recordRuntimeOwnedProviderAttemptStart as Dr, recordScopeOwnerMaterialization as Dt, resolveWorkerSlots as E, WORKER_TRACE_PROPAGATION as En, recordRuntimeOwnedDriveHarnessProviderEvidence as Er, noteScopeOwnerPlannedExecution as Et, attachWorker as F, createOpenInferenceFileExporter as Fn, runtimeOwnedPendingExecutorMaterialization as Fr, beginScopeRetainedOwnerDrive as Ft, settledToIteration as G, captureBoundHarnessTranscript as Gn, RetainedRunProviderContractError as Gr, scopeRetainedOwnerContext as Gt, spawnJournalRecordEvents as H, sanitizeKnowledgeReadinessReport as Hn, isRuntimeFlowBrain as Hr, scopeRetainedOwnerCheckpointing as Ht, readWorkerInteractiveBinding as I, createOtelExporter as In, runtimeOwnedScopeOwnerControl as Ir, scopeRetainedOwnerSettled as It, freeSlots as J, harnessTranscriptFromLines as Jn, exactSession as Jr, ownedTreeRootSpawn as Jt, assertRecursiveReservationPolicy as K, captureHarnessTranscript as Kn, assertEventBinding as Kr, scopeRetainedOwnerJournalRoot as Kt, reconnectRetainedInteractiveRun as L, flatOtelSpan as Ln, runtimeOwnedScopeOwnerRuntime as Lr, scopeRetainedOwnerTurnEnded as Lt, workerTraceAnalysisStore as M, buildLoopOtelSpans as Mn, runtimeOwnedExecutorExecutionBinding as Mr, coordinationProfileToolPrefix as Mt, nestedScopeSeamKey as N, buildLoopSpanNodes as Nn, runtimeOwnedExecutorMaterialization as Nr, providerVisibleProfile as Nt, sumSpendFromEvents as O, workerTraceHeaders as On, recordRuntimeOwnedProviderDispatchNotStarted as Or, restoreScopeOwnerAcceptedExecution as Ot, interactiveAdmissionSeamKey as P, buildRuntimeEventOtelSpans as Pn, runtimeOwnedExecutorProviderEvidence as Pr, runtimeGraphMetadataKey as Pt, closeScopeAdmission as Q, HARNESS_TRANSCRIPT_READ_LIMITS as Qn, abortReason as Qr, nestedDriverTreeRoot as Qt, recoverRetainedInteractiveRun as R, generateSpanId as Rn, unknownExecutionBindingReceipt as Rr, assertRetainedOwnerCoordinationRekey as Rt, writeWorkerSteer as S, observerRecordDigest as Sn, knownExecutionBindingReceipt as Sr, scopeRetainedOwnerPriorSpend as St, openSlotGroup as T, environmentGone as Tn, providerAttemptEvidence as Tr, finalizeScopeOwnerMaterialization as Tt, appendTeardownConfirmation as U, sanitizeRuntimeStreamEvent as Un, runtimeFlowAgent as Ur, bindScopeRetainedOwnerEnvironmentId as Ut, appendSpawnEvents as V, createRuntimeStreamEventCollector as Vn, executableAgentSpecSnapshot as Vr, noteScopeRetainedOwnerCoordination as Vt, reenteredWorkers as W, HARNESS_TRANSCRIPT_SETTLE_TIMEOUT_MS as Wn, runtimeFlowBrain as Wr, bindScopeRetainedOwnerProvider as Wt, rollingDispatch as X, persistHarnessTranscript as Xn, sameControlCoordinates as Xr, attestNestedDriverTreeOwner as Xt, queueOf as Y, harnessTranscriptUnavailable as Yn, freezeControlRef as Yr, materializeTreeView as Yt, closeRetainedSlots as Z, readHarnessTranscript as Zn, RunCancellationReason as Zr, driverRuntime as Zt, supervisorRunDir as _, acceptedInteractiveControl as _n, attestRuntimeOwnedScopeOwner as _r, environmentReader as _t, readRootStream as a, executorObservationSeamKey as an, readWorkerProgress as ar, recordScopeOwnerPause as at, workerInboxFileFromEventDir as b, FileObserverJournal as bn, finalizeRuntimeOwnedPendingExecutor as br, consumeScopeRetainedOwnerResult as bt, cancelWorker as c, stopRetainedNativeExecution as cn, SEAT_RECHECK_MS as cr, releaseRetainedEnvironments as ct, legacySupervisorRunsRoot as d, mintRetainedIdentity as dn, authoredSeatStages as dr, startScopeRecoveries as dt, runAbortable as ei, encodeResultBlob as en, resolveHarnessTranscriptCapture as er, meterRuntimeOwnedAccounting as et, readWorkerCancelRequests as f, reconnectRetainedRun as fn, seatExecutionProfile as fr, unconfirmedTeardowns as ft, safeWorkerFile as g, retainedCreateMaterial as gn, attestRuntimeOwnedPendingExecutor as gr, scopeRetainedOwnerResourceReader as gt, readWorkerSteerRequests as h, startRetainedRunInEnvironment as hn, attestRuntimeOwnedExecutor as hr, releaseScopeRetainedOwnerForSeatPause as ht, nodeStreamFile as i, providerMessageText as ii, executorObservation as in, describeToolArgs as ir, recordScopeOwnerDriverAttempt as it, parseWorkerToolTraceArtifact as j, readTraceContextFromEnv as jn, runtimeOwnedDriveHarnessProviderEvidence as jr, coordinationMcpAlias as jt, replaySpawnTree as k, createPropagatingTraceEmitter as kn, recordRuntimeOwnedProviderIdentityConflict as kr, scopeOwnerExecutionObservation as kt, claimWorkerSteerDelivery as l, verifyWorkspaceMarker as ln, SeatChain as lr, retryUnconfirmedTeardowns as lt, readWorkerSteerAcknowledgement as m, startRetainedRun as mn, attestRuntimeOwnedDeferredExecutor as mr, prepareScopeRetainedOwnerSeatSwitch as mt, ROOT_STREAM_FILE as n, promptFromAgentTurnInput as ni, closesCursorSlot as nn, DEFAULT_STALL_AFTER_MS as nr, pauseScopeSeatAdmission as nt, readRootStreamReceipt as o, observeModelRequest as on, isLiveNodeStatus as or, registerNestedTeardownScope as ot, readWorkerCancellation as p, recoverRetainedRun as pn, subscriptionUsageLimitSignal as pr, waitForScopeChildren as pt, deriveNodeExecutionIdentity as q, harnessTranscriptArtifact as qn, awaitAbortable$1 as qr, loadSpawnForest as qt, createRootStreamSink as r, promptOptionsFromAgentTurnInput as ri, insideCursorNamespace as rn, createActivityLog as rr, recordScopeOwnerBarrenPause as rt, appendWorkerControlEvent as s, describeRetainedNativeStops as sn, isTerminalNodeStatus as sr, releaseHeldEnvironments as st, createScope as t, signalAbortError as ti, SpawnEventIndex as tn, retainHarnessTranscript as tr, meterRuntimeOwnedProviderAttempt as tt, legacySupervisorRunDir as u, assertRetainedRunReplayMaterial as un, SeatPauseError as ur, settleManagerWork as ut, supervisorRunsRoot as v, offerInteractiveControl as vn, authoredAgentIdentity as vr, resolveSpawnResourcePaths as vt, createWorkerSlots as w, destroyInteractiveEnvironment as wn, newExecutionAttemptId as wr, beginScopeOwnerAttempt as wt, writeWorkerCancellation as x, createFileObserverHooks as xn, inheritRuntimeOwnedExecutorAttestation as xr, prepareScopeRetainedOwnerTask as xt, workerCancellationsDir as y, prepareInteractiveDelegation as yn, authoredProfileDigest as yr, abandonScopeRetainedOwnerInvocation as yt, startRetainedInteractiveRun as z, loopEventToOtelSpan as zn, unknownMaterializationReceipt as zr, reconcileScopeRetainedOwnerEnvironment as zt };
+// src/durable/spawn-journal/provider-model-evidence.ts
+/**
+* Aggregate provider-served model evidence across one recursively owned journal forest.
+*
+* The parent tree records an owned driver's terminal summary, while that driver's own inference
+* and descendants live in its owned tree. This reducer follows the forest reader's explicit tree
+* edges and consumes each tree's metered attempts plus terminal leaf settlements exactly once.
+* A summary node is skipped because its owned tree supplies the source records. Plan materialization
+* is intentionally not read: it proves only what Runtime requested, not what a provider served.
+*
+* Missing legacy evidence, an unfinished node, an unopened owned tree, an identity conflict, and a
+* paid attempt without a qualified served snapshot all return unknown. An explicit
+* `providerDispatch: "not_started"` arm and Runtime accounting-only metered records are ignored
+* for served-model identity, while absent or malformed legacy data remains unknown here.
+*/
+function aggregateProviderModelEvidence(forest) {
+	const attempts = [];
+	const observedModels = /* @__PURE__ */ new Set();
+	const canonicalModels = /* @__PURE__ */ new Set();
+	const nodes = /* @__PURE__ */ new Map();
+	let reason;
+	let sawProviderEvidence = false;
+	for (const node of forest.nodes) nodes.set(forestNodeKey(node.treeRoot, node.id), node);
+	if (forest.missingTrees.length > 0 || forest.inDoubt.length > 0) reason = "provider-model-missing";
+	const markMissing = () => {
+		reason ??= "provider-model-missing";
+	};
+	const markConflict = () => {
+		reason = "provider-model-conflict";
+	};
+	const append = (raw) => {
+		sawProviderEvidence = true;
+		if (!isProviderEvidenceObject(raw)) {
+			markMissing();
+			return;
+		}
+		if (raw.status === "unknown") {
+			if (raw.reason === "provider-model-conflict") markConflict();
+			else if (!hasOnlyNotStartedAttempts(raw)) markMissing();
+		} else if (raw.status !== "known") {
+			markMissing();
+			return;
+		}
+		if (!Array.isArray(raw.attempts) || !Array.isArray(raw.models)) {
+			markMissing();
+			return;
+		}
+		const declared = /* @__PURE__ */ new Set();
+		for (const model of raw.models) if (typeof model !== "string" || model.length === 0) markMissing();
+		else declared.add(model);
+		const observedInRecord = /* @__PURE__ */ new Set();
+		for (const rawAttempt of raw.attempts) {
+			if (!isProviderAttemptEvidence(rawAttempt)) {
+				markMissing();
+				continue;
+			}
+			if (rawAttempt.identityConflict === true) markConflict();
+			const observations = [...rawAttempt.observations];
+			if (rawAttempt.providerDispatch === "not_started") {
+				if (observations.length > 0) markMissing();
+				attempts.push(Object.freeze({
+					observations: Object.freeze([]),
+					providerDispatch: "not_started",
+					...rawAttempt.identityConflict === true ? { identityConflict: true } : {}
+				}));
+				continue;
+			}
+			if (observations.length === 0) {
+				markMissing();
+				attempts.push(Object.freeze({
+					observations: Object.freeze([]),
+					...rawAttempt.identityConflict === true ? { identityConflict: true } : {}
+				}));
+				continue;
+			}
+			let base;
+			let snapshot;
+			for (const model of observations) {
+				if (typeof model !== "string" || model.length === 0) {
+					markMissing();
+					continue;
+				}
+				observedInRecord.add(model);
+				observedModels.add(model);
+				const identity = servedIdentityParts(model);
+				if (identity === void 0) {
+					markMissing();
+					continue;
+				}
+				if (base !== void 0 && base !== identity.base) markConflict();
+				if (snapshot !== void 0 && identity.snapshot !== void 0 && snapshot !== identity.snapshot) markConflict();
+				base = identity.base;
+				snapshot ??= identity.snapshot;
+				if (identity.snapshot !== void 0) {
+					canonicalModels.add(`${identity.base}@${identity.snapshot}`);
+					if (canonicalModels.size > 1) markConflict();
+				}
+			}
+			if (base === void 0 || snapshot === void 0) markMissing();
+			attempts.push(Object.freeze({
+				observations: Object.freeze(observations),
+				...rawAttempt.identityConflict === true ? { identityConflict: true } : {}
+			}));
+		}
+		if (declared.size !== observedInRecord.size || [...declared].some((model) => !observedInRecord.has(model))) markMissing();
+	};
+	const terminal = (treeRoot, event) => {
+		const node = nodes.get(forestNodeKey(treeRoot, event.id));
+		if (node === void 0) {
+			markMissing();
+			return;
+		}
+		if (node.ownedTreeRoot !== void 0) return;
+		if (event.kind === "cancelled" && event.providerModel === void 0) {
+			markMissing();
+			return;
+		}
+		append(event.providerModel ?? node.providerModel);
+	};
+	for (const tree of forest.trees) for (const event of tree.events) if (event.kind === "metered") {
+		if (event.accountingOnly === true) {
+			if (event.providerModel !== void 0) markMissing();
+			continue;
+		}
+		if (nodes.get(forestNodeKey(tree.root, event.id))?.ownedTreeRoot !== void 0) continue;
+		const evidence = event.providerModel;
+		if (evidence === void 0) markMissing();
+		else append(evidence);
+	} else if (event.kind === "settled" || event.kind === "cancelled") terminal(tree.root, event);
+	if (!sawProviderEvidence || attempts.length === 0 || observedModels.size === 0) reason ??= "provider-model-missing";
+	const models = Object.freeze([...observedModels]);
+	const frozenAttempts = Object.freeze(attempts);
+	return Object.freeze(reason === void 0 ? {
+		status: "known",
+		attempts: frozenAttempts,
+		models
+	} : {
+		status: "unknown",
+		attempts: frozenAttempts,
+		models,
+		reason
+	});
+}
+function forestNodeKey(treeRoot, nodeId) {
+	return `${treeRoot}\u0000${nodeId}`;
+}
+function isProviderEvidenceObject(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value) && "status" in value;
+}
+function hasOnlyNotStartedAttempts(evidence) {
+	return Array.isArray(evidence.attempts) && evidence.attempts.length > 0 && evidence.attempts.every((attempt) => isProviderAttemptEvidence(attempt) && attempt.providerDispatch === "not_started" && attempt.observations.length === 0 && attempt.identityConflict !== true);
+}
+function isProviderAttemptEvidence(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value) && Array.isArray(value.observations) && (value.providerDispatch === void 0 || value.providerDispatch === "not_started");
+}
+function servedIdentityParts(model) {
+	const at = model.lastIndexOf("@");
+	const rawBase = at < 0 ? model : model.slice(0, at);
+	const base = rawBase.slice(rawBase.lastIndexOf("/") + 1);
+	if (base.length === 0) return void 0;
+	const snapshot = at < 0 ? void 0 : model.slice(at + 1);
+	if (snapshot !== void 0 && snapshot.length === 0) return void 0;
+	return snapshot === void 0 ? { base } : {
+		base,
+		snapshot
+	};
+}
+// src/runtime/supervise/settled-usage.ts
+/** Use ownership edges to avoid counting parent summaries as additional inference attempts. */
+function settledUsage(forest, spent, providerModel, profile) {
+	let unknownAttempts = 0;
+	const nodes = new Map(forest.nodes.map((node) => [`${node.treeRoot}\0${node.id}`, node]));
+	for (const tree of forest.trees) {
+		const metered = new Set(tree.events.filter((event) => event.kind === "metered" && !event.accountingOnly).map((event) => event.id));
+		for (const event of tree.events) {
+			if (nodes.get(`${tree.root}\0${event.id}`)?.ownedTreeRoot !== void 0) continue;
+			if (event.kind === "metered" && event.accountingOnly) {
+				if (event.spend.tokensKnown === false || event.spend.tokens.tokensKnown === false) unknownAttempts = null;
+				continue;
+			}
+			let spend;
+			if (event.kind === "metered" && !event.accountingOnly) spend = event.spend;
+			else if ((event.kind === "settled" || event.kind === "cancelled") && !metered.has(event.id)) spend = event.spent;
+			else continue;
+			if (spend && spend.tokensKnown !== false && spend.tokens.tokensKnown !== false) continue;
+			const evidence = event.providerModel;
+			if (evidence?.attempts?.length !== 1) unknownAttempts = null;
+			else if (unknownAttempts !== null && evidence.attempts[0]?.providerDispatch !== "not_started") unknownAttempts++;
+		}
+	}
+	if (forest.inDoubt.length || forest.missingTrees.length) unknownAttempts = null;
+	const status = spent.tokensKnown === true ? "known" : spent.tokens.input > 0 || spent.tokens.output > 0 ? "lower-bound" : "unknown";
+	return {
+		tokens: {
+			status,
+			input: status === "unknown" ? null : spent.tokens.input,
+			output: status === "unknown" ? null : spent.tokens.output,
+			unknownAttempts: status === "known" ? 0 : unknownAttempts === 0 ? null : unknownAttempts
+		},
+		requestedModel: {
+			id: profile?.model?.default ?? null,
+			harness: profile?.harness ?? null,
+			provider: profile?.model?.provider ?? null
+		},
+		observedModels: providerModel.models
+	};
+}
+// src/runtime/supervise/supervisor-accounting.ts
+/** Terminal usage comes from receipts, never admission's conservative reservation charges.
+* Missing receipts stay named gaps; ms is wall time because parallel executor times overlap. */
+async function terminalAccounting(journal, root, elapsedMs, profile) {
+	const events = await journal.loadTree(root);
+	if (events === void 0) throw new RuntimeRunStateError(`supervisor: spawn tree '${root}' is missing from the journal after run (corrupted log)`);
+	for (const event of events) {
+		const spend = event.kind === "metered" ? event.spend : event.kind === "settled" || event.kind === "cancelled" || event.kind === "reconciled" ? event.spent : void 0;
+		if (spend !== void 0) assertValidSpend(spend, `settlement ${event.id}/${event.kind}`);
+	}
+	const { childWork, driverInference } = sumMeasuredSpendFromEvents(events);
+	const gaps = spendGapsFromEvents(events);
+	const forest = await loadSpawnForest(journal, root);
+	const providerModel = aggregateProviderModelEvidence(forest);
+	const fleetYield = fleetYieldFromForest(forest);
+	const summed = addSpend(childWork, driverInference);
+	const spentTotal = {
+		...summed,
+		ms: Math.max(0, elapsedMs),
+		tokensKnown: summed.tokensKnown !== false && summed.tokens.tokensKnown !== false && !gaps.some((gap) => gap.channels.includes("tokens")),
+		usdKnown: summed.usdKnown !== false && !gaps.some((gap) => gap.channels.includes("usd"))
+	};
+	assertValidSpend(spentTotal, "settlement total");
+	return {
+		spentTotal,
+		usage: settledUsage(forest, spentTotal, providerModel, profile),
+		childWork,
+		driverInference,
+		gaps,
+		providerModel,
+		fleetYield
+	};
+}
+/** Count each child by its last terminal record across the owned forest; roots are exempt. */
+function fleetYieldFromForest(forest) {
+	const spawned = /* @__PURE__ */ new Set();
+	const terminal = /* @__PURE__ */ new Map();
+	const released = /* @__PURE__ */ new Set();
+	const unconfirmed = /* @__PURE__ */ new Set();
+	for (const { event } of forest.events) if (event.kind === "spawned") {
+		if (event.parent !== void 0) spawned.add(event.id);
+	} else if (event.kind === "settled" || event.kind === "cancelled") {
+		const bucket = event.kind === "cancelled" ? "cancelled" : event.status;
+		terminal.set(event.id, bucket);
+		released.delete(event.id);
+		unconfirmed.delete(event.id);
+		if (bucket !== "done" && event.retainedExecution === "released") released.add(event.id);
+		if (bucket !== "done" && event.retainedExecution === "release-unconfirmed") unconfirmed.add(event.id);
+	}
+	const count = (bucket) => [...terminal.values()].filter((value) => value === bucket).length;
+	const fleetYield = {
+		spawned: spawned.size,
+		done: count("done"),
+		down: count("down"),
+		cancelled: count("cancelled"),
+		neverSettled: forest.inDoubt.length,
+		releasedUnrecovered: released.size,
+		releaseUnconfirmed: unconfirmed.size
+	};
+	if (fleetYield.done + fleetYield.down + fleetYield.cancelled + fleetYield.neverSettled !== fleetYield.spawned) throw new RuntimeRunStateError(`supervisor: fleet yield does not partition the spawned children of '${forest.root}' (${JSON.stringify(fleetYield)})`);
+	if (fleetYield.releasedUnrecovered + fleetYield.releaseUnconfirmed > fleetYield.down + fleetYield.cancelled) throw new RuntimeRunStateError(`supervisor: released children exceed down + cancelled for '${forest.root}' (${JSON.stringify(fleetYield)})`);
+	return fleetYield;
+}
+/** Merge missing-receipt channels by node and cause; the root settles in result.json. */
+function spendGapsFromEvents(events) {
+	const labels = /* @__PURE__ */ new Map();
+	const budgets = /* @__PURE__ */ new Map();
+	const terminal = /* @__PURE__ */ new Set();
+	for (const ev of events) if (ev.kind === "spawned") {
+		labels.set(ev.id, ev.label);
+		budgets.set(ev.id, ev.budget);
+	} else if (closesCursorSlot(ev)) terminal.add(ev.id);
+	const gaps = /* @__PURE__ */ new Map();
+	const record = (id, kind, channels) => {
+		if (channels.length === 0) return;
+		const key = `${kind}:${id}`;
+		const existing = gaps.get(key);
+		if (existing !== void 0) for (const channel of channels) existing.channels.add(channel);
+		else gaps.set(key, {
+			id,
+			kind,
+			channels: new Set(channels)
+		});
+	};
+	for (const ev of events) if (ev.kind === "spawned" && ev.parent !== void 0 && !terminal.has(ev.id)) record(ev.id, "never-settled", [
+		"tokens",
+		"usd",
+		...Object.keys(ev.budget.resources ?? {}).map((name) => `resource:${name}`)
+	]);
+	else if (ev.kind === "cancelled" && ev.spent === void 0) record(ev.id, "unreported", [
+		"tokens",
+		"usd",
+		...Object.keys(budgets.get(ev.id)?.resources ?? {}).map((name) => `resource:${name}`)
+	]);
+	else if (ev.kind === "settled" || ev.kind === "cancelled" && ev.spent !== void 0) record(ev.id, "unreported", unknownChannels(withBudgetResources(ev.spent, budgets.get(ev.id) ?? {})));
+	else if (ev.kind === "metered") record(ev.id, "unreported", unknownChannels(ev.spend));
+	return [...gaps.values()].map((gap) => {
+		const label = labels.get(gap.id);
+		return {
+			id: gap.id,
+			...label !== void 0 ? { label } : {},
+			kind: gap.kind,
+			channels: [...gap.channels]
+		};
+	});
+}
+/** The channels a single spend record explicitly marks incomplete. */
+function unknownChannels(spend) {
+	const channels = [];
+	if (spend.tokensKnown === false || spend.tokens.tokensKnown === false) channels.push("tokens");
+	if (spend.usdKnown === false) channels.push("usd");
+	for (const [name, resource] of Object.entries(spend.resources ?? {})) if (!resource.known) channels.push(`resource:${name}`);
+	return channels;
+}
+/** True when any driver metered inference this run (so the winner carries a `spentBreakdown`).
+*  Checks every channel `addSpend` sums — including `ms` — so the gate stays consistent with the
+*  total even though the coordination driver currently stamps `ms: 0`. */
+function isNonEmptySpend(s) {
+	return s.iterations > 0 || s.tokens.input > 0 || s.tokens.output > 0 || s.usd > 0 || s.ms > 0 || s.tokensKnown === false || s.usdKnown === false || Object.values(s.resources ?? {}).some((resource) => resource.amount > 0 || !resource.known);
+}
+export { closeScopeAdmission as $, readBoundHarnessSessions as $n, linkAbort as $r, nestedDriverTreeRoot as $t, replaySpawnTree as A, mergeTraceEnv as An, recordRuntimeOwnedProviderModel as Ar, scopeOwnerExecutionObservation as At, startRetainedInteractiveRun as B, createRuntimeEventCollector as Bn, executableAgentProfileSnapshot as Br, reconcileScopeRetainedOwnerEnvironment as Bt, writeWorkerCancellation as C, verifyObserverRecords as Cn, knownMaterializationReceipt as Cr, scopeRetainedOwnerPriorSpend as Ct, openSlotGroup as D, workerTraceEnv as Dn, recordRuntimeOwnedProviderAttemptStart as Dr, noteScopeOwnerPlannedExecution as Dt, createWorkerSlots as E, WORKER_TRACE_PROPAGATION as En, recordRuntimeOwnedDriveHarnessProviderEvidence as Er, finalizeScopeOwnerMaterialization as Et, interactiveAdmissionSeamKey as F, createOpenInferenceFileExporter as Fn, runtimeOwnedPendingExecutorMaterialization as Fr, runtimeGraphMetadataKey as Ft, reenteredWorkers as G, captureBoundHarnessTranscript as Gn, RetainedRunProviderContractError as Gr, bindScopeRetainedOwnerProvider as Gt, appendSpawnEvents as H, sanitizeKnowledgeReadinessReport as Hn, isRuntimeFlowBrain as Hr, noteScopeRetainedOwnerCoordination as Ht, attachWorker as I, createOtelExporter as In, runtimeOwnedScopeOwnerControl as Ir, beginScopeRetainedOwnerDrive as It, deriveNodeExecutionIdentity as J, harnessTranscriptFromLines as Jn, exactSession as Jr, loadSpawnForest as Jt, settledToIteration as K, captureHarnessTranscript as Kn, assertEventBinding as Kr, scopeRetainedOwnerContext as Kt, readWorkerInteractiveBinding as L, flatOtelSpan as Ln, runtimeOwnedScopeOwnerRuntime as Lr, scopeRetainedOwnerSettled as Lt, parseWorkerToolTraceArtifact as M, buildLoopOtelSpans as Mn, runtimeOwnedExecutorExecutionBinding as Mr, coordinationMcpAlias as Mt, workerTraceAnalysisStore as N, buildLoopSpanNodes as Nn, runtimeOwnedExecutorMaterialization as Nr, coordinationProfileToolPrefix as Nt, resolveWorkerSlots as O, workerTraceHeaders as On, recordRuntimeOwnedProviderDispatchNotStarted as Or, recordScopeOwnerMaterialization as Ot, nestedScopeSeamKey as P, buildRuntimeEventOtelSpans as Pn, runtimeOwnedExecutorProviderEvidence as Pr, providerVisibleProfile as Pt, closeRetainedSlots as Q, HARNESS_TRANSCRIPT_READ_LIMITS as Qn, abortReason as Qr, driverRuntime as Qt, reconnectRetainedInteractiveRun as R, generateSpanId as Rn, unknownExecutionBindingReceipt as Rr, scopeRetainedOwnerTurnEnded as Rt, workerInboxFileFromEventDir as S, observerRecordDigest as Sn, knownExecutionBindingReceipt as Sr, prepareScopeRetainedOwnerTask as St, writeWorkerSteerAcknowledgement as T, environmentGone as Tn, providerAttemptEvidence as Tr, beginScopeOwnerAttempt as Tt, spawnJournalRecordEvents as U, sanitizeRuntimeStreamEvent as Un, runtimeFlowAgent as Ur, scopeRetainedOwnerCheckpointing as Ut, FileSpawnJournal as V, createRuntimeStreamEventCollector as Vn, executableAgentSpecSnapshot as Vr, scopeRetainedOwnerRestorePoint as Vt, appendTeardownConfirmation as W, HARNESS_TRANSCRIPT_SETTLE_TIMEOUT_MS as Wn, runtimeFlowBrain as Wr, bindScopeRetainedOwnerEnvironmentId as Wt, queueOf as X, persistHarnessTranscript as Xn, sameControlCoordinates as Xr, materializeTreeView as Xt, freeSlots as Y, harnessTranscriptUnavailable as Yn, freezeControlRef as Yr, ownedTreeRootSpawn as Yt, rollingDispatch as Z, readHarnessTranscript as Zn, RunCancellationReason as Zr, attestNestedDriverTreeOwner as Zt, readWorkerSteerRequests as _, acceptedInteractiveControl as _n, attestRuntimeOwnedScopeOwner as _r, scopeRetainedOwnerResourceReader as _t, createRootStreamSink as a, executorObservationSeamKey as an, readWorkerProgress as ar, recordScopeOwnerDriverAttempt as at, supervisorRunsRoot as b, FileObserverJournal as bn, finalizeRuntimeOwnedPendingExecutor as br, abandonScopeRetainedOwnerInvocation as bt, readRootStreamReceipt as c, stopRetainedNativeExecution as cn, SEAT_RECHECK_MS as cr, releaseHeldEnvironments as ct, claimWorkerSteerDelivery as d, mintRetainedIdentity as dn, authoredSeatStages as dr, settleManagerWork as dt, runAbortable as ei, FileResultBlobStore as en, resolveHarnessTranscriptCapture as er, hasRetriableTeardowns as et, legacySupervisorRunDir as f, reconnectRetainedRun as fn, seatExecutionProfile as fr, startScopeRecoveries as ft, readWorkerSteerAcknowledgement as g, retainedCreateMaterial as gn, attestRuntimeOwnedPendingExecutor as gr, releaseScopeRetainedOwnerForSeatPause as gt, readWorkerCancellation as h, startRetainedRunInEnvironment as hn, attestRuntimeOwnedExecutor as hr, prepareScopeRetainedOwnerSeatSwitch as ht, ROOT_STREAM_FILE as i, providerMessageText as ii, executorObservation as in, describeToolArgs as ir, recordScopeOwnerBarrenPause as it, isTraceAnalysisStore as j, readTraceContextFromEnv as jn, runtimeOwnedDriveHarnessProviderEvidence as jr, scopeOwnerExecutorNodeContext as jt, prepareScopeResume as k, createPropagatingTraceEmitter as kn, recordRuntimeOwnedProviderIdentityConflict as kr, restoreScopeOwnerAcceptedExecution as kt, appendWorkerControlEvent as l, verifyWorkspaceMarker as ln, SeatChain as lr, releaseRetainedEnvironments as lt, readWorkerCancelRequests as m, startRetainedRun as mn, attestRuntimeOwnedDeferredExecutor as mr, waitForScopeChildren as mt, terminalAccounting as n, promptFromAgentTurnInput as ni, SpawnEventIndex as nn, DEFAULT_STALL_AFTER_MS as nr, meterRuntimeOwnedProviderAttempt as nt, nodeStreamFile as o, observeModelRequest as on, isLiveNodeStatus as or, recordScopeOwnerPause as ot, legacySupervisorRunsRoot as p, recoverRetainedRun as pn, subscriptionUsageLimitSignal as pr, unconfirmedTeardowns as pt, assertRecursiveReservationPolicy as q, harnessTranscriptArtifact as qn, awaitAbortable$1 as qr, scopeRetainedOwnerJournalRoot as qt, createScope as r, promptOptionsFromAgentTurnInput as ri, insideCursorNamespace as rn, createActivityLog as rr, pauseScopeSeatAdmission as rt, readRootStream as s, describeRetainedNativeStops as sn, isTerminalNodeStatus as sr, registerNestedTeardownScope as st, isNonEmptySpend as t, signalAbortError as ti, encodeResultBlob as tn, retainHarnessTranscript as tr, meterRuntimeOwnedAccounting as tt, cancelWorker as u, assertRetainedRunReplayMaterial as un, SeatPauseError as ur, retryUnconfirmedTeardowns as ut, safeWorkerFile as v, offerInteractiveControl as vn, authoredAgentIdentity as vr, environmentReader as vt, writeWorkerSteer as w, destroyInteractiveEnvironment as wn, newExecutionAttemptId as wr, scopeRetainedOwnerResult as wt, workerCancellationsDir as x, createFileObserverHooks as xn, inheritRuntimeOwnedExecutorAttestation as xr, consumeScopeRetainedOwnerResult as xt, supervisorRunDir as y, prepareInteractiveDelegation as yn, authoredProfileDigest as yr, resolveSpawnResourcePaths as yt, recoverRetainedInteractiveRun as z, loopEventToOtelSpan as zn, unknownMaterializationReceipt as zr, assertRetainedOwnerCoordinationRekey as zt };
 
-//# sourceMappingURL=scope-BF3RUg3U.js.map
+//# sourceMappingURL=supervisor-accounting-DxLQ_TQe.js.map