feat(supervise): add recursive product control and durable identity

CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## 0.117.0
+
+- Run every supervisor, including the root, from one complete `AgentProfile`, preserve exact profile/task/candidate identity through recursive delegation, and reject execution paths that would silently drop profile fields.
+- Expose node-scoped product tools, product authorization for exact spawns and continuations, awaited replay-safe coordination observation, structured worker traces, trace-derived failure guidance, and caller cancellation across the complete recursive run.
+- Make durable run and assignment identity stable across restart while retaining exact materialization, accounting, delivery, and settlement evidence for each node.
+- Add live root-manager steering, trusted post-authorization manager/leaf classification, per-assignment completion checks, a cold recursive forest reader, and public exact-profile candidate conversion helpers.
+
 ## 0.116.0
 
 ### A supervisor tree spans machines
@@ -139,6 +146,7 @@ The supervisor's public contract closes six gaps found by running a real recursi
 - Candidate profile freeze/thaw preserves config values instead of unwrapping them to schema-invalid strings; certified intelligence bindings wrap through `defineAgentProfilePublicConfig`.
 - Implement eval 0.138's `TraceAnalysisStore` contract on the iterations store: real `hasTrace`/`hasSpans`, byte-ceiling span continuation (`omitted_span_ids`/`has_more`), and `total_matches` removed from search results.
 - Sandbox 0.15.2 remains typed against interface 0.36; profiles cross that boundary as data through one commented adapter pair (`profileAsSandboxProfile`), to be removed when sandbox releases against 0.40.
+>>>>>>> origin/main
 
 ## 0.109.2
 

README.md

@@ -116,7 +116,13 @@ One supervisor spawns and steers workers toward a goal. Where the workers run (a
 import { supervise } from '@tangle-network/agent-runtime/kernel'
 
 const result = await supervise(
-  { name: 'supervisor', harness: null, systemPrompt: 'Delegate to workers; do not solve the task yourself.' },
+  {
+    name: 'supervisor',
+    harness: 'cli-base',
+    prompt: {
+      systemPrompt: 'Delegate to workers; do not solve the task yourself.',
+    },
+  },
   'Implement the feature and make the tests pass.',
   { budget, router, backend }, // backend = where workers run: router-tools | sandbox+harness | bridge
 )

docs/api/agent.md

@@ -1108,6 +1108,57 @@ AgentProfile axis name, with `custom:<name>` reserved for caller-owned extension
 
 ## Variables
 
+### fullProfileMaterialization
+
+> `const` **fullProfileMaterialization**: [`ProfileMaterializationContract`](#profilematerializationcontract)
+
+Materialization contract for a run path that executes every canonical AgentProfile leaf.
+
+***
+
+### promptModelProfileMaterialization
+
+> `const` **promptModelProfileMaterialization**: [`ProfileMaterializationContract`](#profilematerializationcontract)
+
+Materialization contract for an intentionally limited prompt-and-model execution path.
+Identity, harness, and metadata are control fields consumed for naming, placement,
+authorization, and durable attribution; they are carried without adding worker behavior.
+Every behavioral axis other than prompt and model remains unsupported.
+
+***
+
+### worktreeCliProfileMaterialization
+
+> `const` **worktreeCliProfileMaterialization**: [`ProfileMaterializationContract`](#profilematerializationcontract)
+
+Materialization contract for a local coding CLI in an isolated git worktree.
+The shared workspace materializer carries native tools, permissions, MCP, hooks, subagents,
+modes, and file-backed resources when the selected CLI supports their exact values.
+`resourceFailOnError` is carried: it is the fail-closed policy the pre-worktree resource
+RESOLUTION step (`resolveAgentProfileResources`) applies to remote profile resources. Runtime
+placement concerns (hub connections and confidential execution), provider-native extensions,
+and unused model hints are deliberately absent so they fail before a worktree or executor is
+created rather than being mistaken for an effective candidate change.
+
+***
+
+### controlProfileMaterialization
+
+> `const` **controlProfileMaterialization**: [`ProfileMaterializationContract`](#profilematerializationcontract)
+
+Materialization contract for a raw process path that carries only control/identity fields.
+
+***
+
+### promptControlProfileMaterialization
+
+> `const` **promptControlProfileMaterialization**: [`ProfileMaterializationContract`](#profilematerializationcontract)
+
+Materialization contract for an injected inference function whose surrounding driver still
+applies the profile prompt, name, placement, and metadata, but not model selection.
+
+***
+
 ### sandboxActProfileMaterialization
 
 > `const` **sandboxActProfileMaterialization**: [`ProfileMaterializationContract`](#profilematerializationcontract)

docs/api/candidate-execution.md

@@ -254,6 +254,12 @@ Re-exports [prepareAgentCandidateExecution](index.md#prepareagentcandidateexecut
 
 ***
 
+### agentCandidateProfileAsAgentProfile
+
+Re-exports [agentCandidateProfileAsAgentProfile](index.md#agentcandidateprofileasagentprofile)
+
+***
+
 ### applyExactAgentProfileDiff
 
 Re-exports [applyExactAgentProfileDiff](index.md#applyexactagentprofilediff)
@@ -266,6 +272,18 @@ Re-exports [assertCandidateProfileBinding](index.md#assertcandidateprofilebindin
 
 ***
 
+### freezeGenericAgentCandidateProfile
+
+Re-exports [freezeGenericAgentCandidateProfile](index.md#freezegenericagentcandidateprofile)
+
+***
+
+### omitUndefinedObjectFields
+
+Re-exports [omitUndefinedObjectFields](index.md#omitundefinedobjectfields)
+
+***
+
 ### parseExactAgentProfile
 
 Re-exports [parseExactAgentProfile](index.md#parseexactagentprofile)
@@ -278,6 +296,12 @@ Re-exports [parseExactAgentProfileDiff](index.md#parseexactagentprofilediff)
 
 ***
 
+### parseExactCandidateProfile
+
+Re-exports [parseExactCandidateProfile](index.md#parseexactcandidateprofile)
+
+***
+
 ### AgentCandidateModelGrantActivateInput
 
 Re-exports [AgentCandidateModelGrantActivateInput](index.md#agentcandidatemodelgrantactivateinput)