@tangle-network/agent-runtime 7.0.0 → 8.0.0

package/dist/{errors-AzSuGI23.js → errors-DG8yufqX.js}

@@ -60,6 +60,12 @@ var BackendTransportError = class extends AgentEvalError {
 	*/
 	providerDispatch;
 	/**
+	* Bridge-owned proof that the refusal came from a full executor semaphore, not a
+	* provider: the request waited on the host's concurrency gate and was refused as
+	* capacity (`executor_saturated`, HTTP 429). Retryable after `Retry-After`.
+	*/
+	capacity;
+	/**
 	* The upstream's own error class when it names one (the bridge's `parse_error`,
 	* `not_configured`, a provider's `invalid_request_error`). A class the upstream never
 	* retries is a decision about the request, so a retry policy may read it where no
@@ -83,6 +89,7 @@ var BackendTransportError = class extends AgentEvalError {
 		this.remediation = options?.remediation;
 		this.body = options?.body;
 		this.providerDispatch = options?.providerDispatch;
+		this.capacity = options?.capacity;
 	}
 };
 /**
@@ -194,4 +201,4 @@ var RetainedRunDispatchBindingError = class extends AgentEvalError {
 };
 export { JudgeError as a, RetainedInteractiveAdmissionError as c, RetainedRunDispatchBindingError as d, RuntimeRunStateError as f, ConfigError as i, RetainedInteractiveBindingError as l, ValidationError as m, AnalystError as n, NotFoundError as o, SessionMismatchError as p, BackendTransportError as r, PlannerError as s, AgentEvalError$1 as t, RetainedRunAdmissionError as u };
 
-//# sourceMappingURL=errors-AzSuGI23.js.map
+//# sourceMappingURL=errors-DG8yufqX.js.map

package/dist/errors-DG8yufqX.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors-DG8yufqX.js","names":[],"sources":["../src/errors.ts"],"sourcesContent":["/**\n *\n * Error taxonomy for `@tangle-network/agent-runtime`.\n *\n * Public contract: every error this package throws as part of its consumer-\n * facing API either extends `AgentEvalError` (re-exported here for ergonomic\n * `instanceof` checks at the runtime boundary) or extends one of the\n * runtime-specific subclasses below.\n *\n * Internal invariant guards (`throw new Error('this should never happen')`)\n * remain plain `Error` — they are programmer-mistake assertions, not\n * consumer-catchable contract failures.\n *\n * Subclassing strategy: where a runtime-specific failure maps cleanly to an\n * agent-eval code (validation, config, not_found), we re-use the agent-eval\n * subclass. Runtime-only failure modes (session resume against the wrong\n * backend, backend transport errors) get fresh subclasses that still carry an\n * `AgentEvalErrorCode` so cross-package handlers can pattern-match without\n * importing the runtime.\n *\n * @stable\n */\n\nimport { AgentEvalError } from '@tangle-network/agent-eval'\nimport type {\n  AgentInteractiveSessionRef,\n  AgentInteractiveSessionStart,\n  AgentInteractiveSessionStatus,\n} from '@tangle-network/agent-interface'\nimport type { RuntimeFailureCause } from './runtime/failure-cause'\nimport type {\n  RetainedInteractiveAdmission,\n  RetainedRunAdmission,\n} from './runtime/retained-run-types'\n\nexport {\n  AgentEvalError,\n  type AgentEvalErrorCode,\n  ConfigError,\n  JudgeError,\n  NotFoundError,\n  ValidationError,\n} from '@tangle-network/agent-eval'\n\n/**\n *\n * Caller asked to resume a session against a backend whose `kind` does not\n * match the session's recorded backend. This is a routing bug — the same\n * session id was reused across two different backend implementations — and\n * is not retryable without picking the right backend.\n *\n * @stable\n */\nexport class SessionMismatchError extends AgentEvalError {\n  readonly sessionBackend: string\n  readonly requestedBackend: string\n\n  constructor(sessionBackend: string, requestedBackend: string, options?: { cause?: unknown }) {\n    super(\n      'validation',\n      `Cannot resume ${sessionBackend} session with ${requestedBackend} backend`,\n      options,\n    )\n    this.sessionBackend = sessionBackend\n    this.requestedBackend = requestedBackend\n  }\n}\n\n/**\n *\n * A backend transport call (HTTP, gRPC, sidecar IPC) failed with a non-success\n * status. Distinct from `JudgeError` (which is structural / unrecoverable)\n * because backend failures are sometimes retryable and consumers may want to\n * branch on the upstream status code.\n *\n * @stable\n */\nexport class BackendTransportError extends AgentEvalError {\n  readonly backend: string\n  readonly status?: number\n  /**\n   * Router-owned proof that a rejected request never reached a provider.\n   *\n   * This is intentionally one-sided. An absent value, or any value this\n   * package does not understand, remains unknown to Runtime.\n   */\n  readonly providerDispatch?: 'not_started'\n  /**\n   * Bridge-owned proof that the refusal came from a full executor semaphore, not a\n   * provider: the request waited on the host's concurrency gate and was refused as\n   * capacity (`executor_saturated`, HTTP 429). Retryable after `Retry-After`.\n   */\n  readonly capacity?: true\n  /**\n   * The upstream's own error class when it names one (the bridge's `parse_error`,\n   * `not_configured`, a provider's `invalid_request_error`). A class the upstream never\n   * retries is a decision about the request, so a retry policy may read it where no\n   * status arrived.\n   */\n  readonly upstreamCode?: string\n  /** Validated producer remedy; absent when the upstream supplied no trusted structured remedy. */\n  readonly remediation?: RuntimeFailureCause['remediation']\n  /**\n   * Truncated upstream response body (≤2 KiB) when available. Diagnostic\n   * only — surfaces in `backend_error.error.body` and `final.error.body`\n   * so operators can see \"free_tier_limit\", \"invalid_api_key\", etc. without\n   * cracking the log line open.\n   */\n  readonly body?: string\n\n  constructor(\n    backend: string,\n    message: string,\n    options?: {\n      cause?: unknown\n      status?: number\n      upstreamCode?: string\n      remediation?: RuntimeFailureCause['remediation']\n      body?: string\n      providerDispatch?: 'not_started'\n      capacity?: true\n    },\n  ) {\n    super('config', message, options)\n    this.backend = backend\n    this.status = options?.status\n    this.upstreamCode = options?.upstreamCode\n    this.remediation = options?.remediation\n    this.body = options?.body\n    this.providerDispatch = options?.providerDispatch\n    this.capacity = options?.capacity\n  }\n}\n\n/**\n *\n * A runtime-run lifecycle method was called in an order the state machine does\n * not allow: `persist()` before `complete()`, `complete()` twice, etc.\n *\n * @stable\n */\nexport class RuntimeRunStateError extends AgentEvalError {\n  constructor(message: string, options?: { cause?: unknown }) {\n    super('validation', message, options)\n  }\n}\n\n/**\n *\n * The dynamic-loop planner returned an unusable topology move — the LLM emitted\n * no parseable envelope, an unknown `kind`, or a structurally-invalid move\n * (e.g. a fanout with zero tasks). This is a structural failure of the\n * agent-authored topology, not a config mistake: the planner ran but its output\n * cannot drive the kernel. Carries `validation` so cross-package handlers can\n * pattern-match without importing the runtime. Fail loud — never substitute a\n * default move, or the loop silently runs a topology nobody chose.\n *\n * @stable\n */\nexport class PlannerError extends AgentEvalError {\n  constructor(message: string, options?: { cause?: unknown }) {\n    super('validation', message, options)\n  }\n}\n\n/**\n * The analyst loop could not read or run over a round's trace — e.g. an empty round\n * (no iterations to analyze) or a malformed trace projection. Fail loud: a silent empty\n * store would mask a broken capture path and the driver would steer on nothing.\n */\nexport class AnalystError extends AgentEvalError {\n  constructor(message: string, options?: { cause?: unknown }) {\n    super('validation', message, options)\n  }\n}\n\n/**\n *\n * The caller's `onAdmission` durability hook rejected, so a retained run's\n * admission record is not durable. For a pre-create intent, no provider work\n * has started. For a later record, provider state may already be live and the\n * environment remains available for recovery. Carries `capture_integrity`\n * because the required recovery record was not written.\n *\n * @stable\n */\nabstract class RetainedAdmissionError<\n  TAdmission extends RetainedRunAdmission | RetainedInteractiveAdmission,\n> extends AgentEvalError {\n  readonly phase: TAdmission['phase']\n  /** The exact record the hook failed to persist, for direct recovery. */\n  readonly admission: TAdmission\n\n  constructor(admission: TAdmission, options?: { cause?: unknown }) {\n    const recovery =\n      admission.phase === 'intent' || admission.phase === 'interactive_intent'\n        ? 'no provider work has started'\n        : 'the environment is kept for recovery'\n    super(\n      'capture_integrity',\n      `retained run admission (${admission.phase}) was not persisted; ${recovery}`,\n      options,\n    )\n    this.phase = admission.phase\n    this.admission = admission\n  }\n}\n\n/** The caller could not persist one detached-run recovery record. @stable */\nexport class RetainedRunAdmissionError extends RetainedAdmissionError<RetainedRunAdmission> {}\n\n/** The caller could not persist one exact interactive-process recovery record. @stable */\nexport class RetainedInteractiveAdmissionError extends RetainedAdmissionError<RetainedInteractiveAdmission> {}\n\n/**\n * A provider returned a valid interactive reference that does not bind to the\n * exact start request, or returned data that could not be parsed as one.\n *\n * The requested start and any valid provider reference are detached snapshots.\n * Malformed provider data is never copied into the error, so the error remains\n * safe to persist while the environment remains available for orphan cleanup.\n *\n * @stable\n */\nexport class RetainedInteractiveBindingError extends AgentEvalError {\n  /** The exact native-process start request sent to the provider. */\n  readonly requested: AgentInteractiveSessionStart\n  /** The valid provider data, when the provider returned a parseable value. */\n  readonly returned: {\n    readonly ref?: AgentInteractiveSessionRef\n    readonly status?: AgentInteractiveSessionStatus\n  }\n\n  constructor(\n    requested: AgentInteractiveSessionStart,\n    returned: RetainedInteractiveBindingError['returned'],\n    options?: { cause?: unknown },\n  ) {\n    super(\n      'backend_integrity',\n      'provider returned interactive data that does not bind to the requested start; the environment is kept for diagnosis and cleanup',\n      options,\n    )\n    this.requested = Object.freeze(requested)\n    this.returned = Object.freeze(returned)\n  }\n}\n\n/**\n *\n * A retained dispatch answered with coordinates that do not bind to the\n * identity the runtime requested, or failed exact verification. The\n * environment-phase admission is already durable at this point, so its\n * coordinates plus the provider reference carried here are the manual\n * recovery path. The environment is intentionally kept. Carries\n * `backend_integrity` because the provider violated its dispatch contract.\n *\n * @stable\n */\nexport class RetainedRunDispatchBindingError extends AgentEvalError {\n  /** The coordinates the runtime sent with the dispatch. */\n  readonly requested: {\n    readonly provider: string\n    readonly environmentId: string\n    readonly sessionId: string\n    readonly executionId: string\n  }\n  /** The loose reference the provider actually returned, for triage. */\n  readonly returned: {\n    readonly id?: string\n    readonly provider?: string\n    readonly controlRef?: unknown\n  }\n\n  constructor(\n    requested: RetainedRunDispatchBindingError['requested'],\n    returned: RetainedRunDispatchBindingError['returned'],\n    options?: { cause?: unknown },\n  ) {\n    super(\n      'backend_integrity',\n      'retained dispatch did not bind to the requested identity; the durable environment admission and the returned reference on this error are the recovery path',\n      options,\n    )\n    this.requested = requested\n    this.returned = returned\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqDA,IAAa,uBAAb,cAA0C,eAAe;CACvD;CACA;CAEA,YAAY,gBAAwB,kBAA0B,SAA+B;EAC3F,MACE,cACA,iBAAiB,eAAe,gBAAgB,iBAAiB,WACjE,OACF;EACA,KAAK,iBAAiB;EACtB,KAAK,mBAAmB;CAC1B;AACF;;;;;;;;;;AAWA,IAAa,wBAAb,cAA2C,eAAe;CACxD;CACA;;;;;;;CAOA;;;;;;CAMA;;;;;;;CAOA;;CAEA;;;;;;;CAOA;CAEA,YACE,SACA,SACA,SASA;EACA,MAAM,UAAU,SAAS,OAAO;EAChC,KAAK,UAAU;EACf,KAAK,SAAS,SAAS;EACvB,KAAK,eAAe,SAAS;EAC7B,KAAK,cAAc,SAAS;EAC5B,KAAK,OAAO,SAAS;EACrB,KAAK,mBAAmB,SAAS;EACjC,KAAK,WAAW,SAAS;CAC3B;AACF;;;;;;;;AASA,IAAa,uBAAb,cAA0C,eAAe;CACvD,YAAY,SAAiB,SAA+B;EAC1D,MAAM,cAAc,SAAS,OAAO;CACtC;AACF;;;;;;;;;;;;;AAcA,IAAa,eAAb,cAAkC,eAAe;CAC/C,YAAY,SAAiB,SAA+B;EAC1D,MAAM,cAAc,SAAS,OAAO;CACtC;AACF;;;;;;AAOA,IAAa,eAAb,cAAkC,eAAe;CAC/C,YAAY,SAAiB,SAA+B;EAC1D,MAAM,cAAc,SAAS,OAAO;CACtC;AACF;;;;;;;;;;;AAYA,IAAe,yBAAf,cAEU,eAAe;CACvB;;CAEA;CAEA,YAAY,WAAuB,SAA+B;EAChE,MAAM,WACJ,UAAU,UAAU,YAAY,UAAU,UAAU,uBAChD,iCACA;EACN,MACE,qBACA,2BAA2B,UAAU,MAAM,uBAAuB,YAClE,OACF;EACA,KAAK,QAAQ,UAAU;EACvB,KAAK,YAAY;CACnB;AACF;;AAGA,IAAa,4BAAb,cAA+C,uBAA6C,CAAC;;AAG7F,IAAa,oCAAb,cAAuD,uBAAqD,CAAC;;;;;;;;;;;AAY7G,IAAa,kCAAb,cAAqD,eAAe;;CAElE;;CAEA;CAKA,YACE,WACA,UACA,SACA;EACA,MACE,qBACA,mIACA,OACF;EACA,KAAK,YAAY,OAAO,OAAO,SAAS;EACxC,KAAK,WAAW,OAAO,OAAO,QAAQ;CACxC;AACF;;;;;;;;;;;;AAaA,IAAa,kCAAb,cAAqD,eAAe;;CAElE;;CAOA;CAMA,YACE,WACA,UACA,SACA;EACA,MACE,qBACA,8JACA,OACF;EACA,KAAK,YAAY;EACjB,KAAK,WAAW;CAClB;AACF"}

package/dist/{failure-cause-rJTm_Tx8.js → failure-cause-CVB-YE88.js}

@@ -1,6 +1,6 @@
-import { m as ValidationError, r as BackendTransportError, t as AgentEvalError } from "./errors-AzSuGI23.js";
-import { A as withBudgetResources, C as unreportedSpend, D as addResourceSpend, E as zeroTokenUsage, O as assertResources, T as zeroSpend, i as chargedTokens, l as fnv1a32Hex, m as promptCacheTokenClasses, n as addSpend, o as cloneTokenUsage, r as addTokenUsage, u as hasCompleteCacheBreakdown } from "./util-C_cdPNC4.js";
-import { a as errMessage, i as causeChain, n as detachedSnapshot, s as errorProperty } from "./snapshot-Cgj2Wzi6.js";
+import { m as ValidationError, r as BackendTransportError, t as AgentEvalError } from "./errors-DG8yufqX.js";
+import { A as withBudgetResources, C as unreportedSpend, D as addResourceSpend, E as zeroTokenUsage, O as assertResources, T as zeroSpend, i as chargedTokens, l as fnv1a32Hex, m as promptCacheTokenClasses, n as addSpend, o as cloneTokenUsage, r as addTokenUsage, u as hasCompleteCacheBreakdown } from "./util-fcckrkKp.js";
+import { a as errMessage, i as causeChain, n as detachedSnapshot, s as errorProperty } from "./snapshot-BKI_w3JD.js";
 import { AgentTurnResultSchema, CanonicalStreamEventSchema, RuntimeEventEnvelopeSchema } from "@tangle-network/agent-interface";
 import { isRecord } from "@tangle-network/agent-core";
 import { collectAgentFinalMessageText, collectAgentResponseText } from "@tangle-network/sandbox";
@@ -2386,6 +2386,11 @@ const PLATFORM_FAILURE_CODES = new Set([
 	"EPIPE",
 	"EADDRINUSE"
 ].map((code) => code.toLowerCase()));
+/** A harness process died mid-step. The sandbox can still name that execution as the session owner. */
+const HARNESS_PROCESS_DEATH = /killed by SIGKILL|OpenCode exited while a model step was still in progress/u;
+function harnessProcessDied(text) {
+	return HARNESS_PROCESS_DEATH.test(text);
+}
 const PLATFORM_FAILURE_MESSAGES = [
 	/^terminated$/u,
 	/Execution exceeded its time limit/u,
@@ -2403,7 +2408,7 @@ const PLATFORM_FAILURE_MESSAGES = [
 	/provider_quota_exceeded|provider_quota_exhausted|QUOTA_EXCEEDED|rate limit/iu,
 	/is at its box cap/u,
 	/could not materialize the seat credential/u,
-	/OpenCode exited while a model step was still in progress/u
+	HARNESS_PROCESS_DEATH
 ];
 /** Producer-owned classification first; legacy platform codes/messages otherwise leave attribution unknown. */
 function executorFailureInfra(failure) {
@@ -2412,8 +2417,7 @@ function executorFailureInfra(failure) {
 	if (code !== void 0 && PLATFORM_FAILURE_CODES.has(code)) return true;
 	return PLATFORM_FAILURE_MESSAGES.some((pattern) => pattern.test(failure.error)) ? true : void 0;
 }
-/** Preserve deterministic result pointers across built-in executors and replay.
-* FNV-1a is an identity convention here, not a cryptographic integrity check. */
+/** Deterministic result pointer. FNV-1a identifies the value. It is not an integrity check. */
 function contentRef(prefix, value) {
 	const str = jsonContentText(value);
 	return `${prefix}:${fnv1a32Hex(str)}`;
@@ -3200,6 +3204,6 @@ function settlementFailureCause(down) {
 		...down.failure?.providerCode === void 0 ? {} : { providerCode: down.failure.providerCode }
 	};
 }
-export { assertValidBudget as $, TRACE_SUMMARY_SCHEMA as A, credentialCommandExit as B, jitteredMs as C, parseCodexUsageRecord as Ct, unavailableResumeAt as D, unavailablePauseMs as E, executorFailureInfra as F, budgetRecoverySeeds as G, BudgetReconcileFault as H, executorFailureReason as I, refreshBudgetLease as J, completedLeafBacking as K, turnFailureOf as L, contentAddress as M, contentRef as N, unavailableSignalOfFailure as O, executorFailure as P, spendFromUsageTotals as Q, turnFailurePolicy as R, cappedDoublingMs as S, decodeHarnessUsage as St, reportedResetAt as T, budgetLeaseUpdates as U, isCredentialRefusal as V, budgetLeases as W, newUsageTotals as X, meterUsageEvent as Y, spendFromUsageEvents as Z, registerRetainedExecutorPreparation as _, notifySandboxEventObserver as _t, runtimeProviderCode as a, sandboxOutputMarker as at, UNAVAILABLE_CODES as b, sandboxTerminalUsageField as bt, DISPATCH_EXECUTION_CHANGED_CODE as c, canonicalStreamEventFromSandboxEvent as ct, TRANSPORT_ERROR_CODES as d, assertSandboxServedModel as dt, assertValidSpend as et, executorEvidenceWriter as f, canonicalSandboxUsageMode as ft, prepareRetainedExecutor as g, isSandboxTerminalEvent as gt, leafContinuationExecutionId as h, extractLlmCallEvent as ht, runtimeFailureRemediationSchema as i, sandboxLeafOutputFromEvents as it, traceRootWriter as j, TRACE_ROOT_SCHEMA as k, DISPATCH_NOT_ADMITTED_CODE as l, extractTransportEventIdentity as lt, isSchemaRejection as m, createSandboxUsageLedger as mt, runtimeFailureCause as n, mapSandboxEvent as nt, settlementFailureCause as o, sandboxProgressEvents as ot, isProvisioningRefusal as p, createSandboxTurnEventCollector as pt, createBudgetPool as q, runtimeFailureCauseSchema as r, mapSandboxToolEvent as rt, BUDGET_CONTINUATION_TASK as s, terminalTextFromSandboxEvent as st, reportedFailureCause as t, createSandboxToolPartState as tt, RetainedExecutionPendingError as u, parseCanonicalTransportEvent as ut, retainedExecutorContext as v, sameModelId as vt, printedStatus as w, recordValue as wt, UNAVAILABLE_STATUSES as x, sumSandboxUsage as xt, retainedExecutorSeamKey as y, sandboxEventServedBackend as yt, hashJson as z };
+export { spendFromUsageTotals as $, TRACE_SUMMARY_SCHEMA as A, hashJson as B, jitteredMs as C, decodeHarnessUsage as Ct, unavailableResumeAt as D, unavailablePauseMs as E, executorFailureInfra as F, budgetLeases as G, isCredentialRefusal as H, executorFailureReason as I, createBudgetPool as J, budgetRecoverySeeds as K, harnessProcessDied as L, contentAddress as M, contentRef as N, unavailableSignalOfFailure as O, executorFailure as P, spendFromUsageEvents as Q, turnFailureOf as R, cappedDoublingMs as S, sumSandboxUsage as St, reportedResetAt as T, recordValue as Tt, BudgetReconcileFault as U, credentialCommandExit as V, budgetLeaseUpdates as W, meterUsageEvent as X, refreshBudgetLease as Y, newUsageTotals as Z, registerRetainedExecutorPreparation as _, isSandboxTerminalEvent as _t, runtimeProviderCode as a, sandboxLeafOutputFromEvents as at, UNAVAILABLE_CODES as b, sandboxEventServedBackend as bt, DISPATCH_EXECUTION_CHANGED_CODE as c, terminalTextFromSandboxEvent as ct, TRANSPORT_ERROR_CODES as d, parseCanonicalTransportEvent as dt, assertValidBudget as et, executorEvidenceWriter as f, assertSandboxServedModel as ft, prepareRetainedExecutor as g, extractLlmCallEvent as gt, leafContinuationExecutionId as h, createSandboxUsageLedger as ht, runtimeFailureRemediationSchema as i, mapSandboxToolEvent as it, traceRootWriter as j, TRACE_ROOT_SCHEMA as k, DISPATCH_NOT_ADMITTED_CODE as l, canonicalStreamEventFromSandboxEvent as lt, isSchemaRejection as m, createSandboxTurnEventCollector as mt, runtimeFailureCause as n, createSandboxToolPartState as nt, settlementFailureCause as o, sandboxOutputMarker as ot, isProvisioningRefusal as p, canonicalSandboxUsageMode as pt, completedLeafBacking as q, runtimeFailureCauseSchema as r, mapSandboxEvent as rt, BUDGET_CONTINUATION_TASK as s, sandboxProgressEvents as st, reportedFailureCause as t, assertValidSpend as tt, RetainedExecutionPendingError as u, extractTransportEventIdentity as ut, retainedExecutorContext as v, notifySandboxEventObserver as vt, printedStatus as w, parseCodexUsageRecord as wt, UNAVAILABLE_STATUSES as x, sandboxTerminalUsageField as xt, retainedExecutorSeamKey as y, sameModelId as yt, turnFailurePolicy as z };
 
-//# sourceMappingURL=failure-cause-rJTm_Tx8.js.map
+//# sourceMappingURL=failure-cause-CVB-YE88.js.map