@agent-native/core 0.51.15 → 0.53.0

package/dist/server/agent-engine-api-key-route.d.ts

@@ -0,0 +1,37 @@
+import { type H3Event } from "h3";
+type AgentEngineApiKeyScope = "user" | "org";
+export interface AgentEngineApiKeyWriteTarget {
+    scope: AgentEngineApiKeyScope;
+    scopeId: string;
+}
+export declare function normalizeAgentEngineApiKeyPayload(body: unknown): {
+    ok: true;
+    key: string;
+    value: string;
+    scope: AgentEngineApiKeyScope;
+} | {
+    ok: false;
+    statusCode: number;
+    error: string;
+};
+export declare function resolveAgentEngineApiKeyWriteTarget(event: H3Event, scope: AgentEngineApiKeyScope): Promise<{
+    ok: true;
+    target: AgentEngineApiKeyWriteTarget;
+} | {
+    ok: false;
+    statusCode: number;
+    error: string;
+}>;
+export declare function createAgentEngineApiKeyHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
+    error: any;
+    ok?: undefined;
+    key?: undefined;
+    scope?: undefined;
+} | {
+    ok: boolean;
+    key: string;
+    scope: AgentEngineApiKeyScope;
+    error?: undefined;
+}>>;
+export {};
+//# sourceMappingURL=agent-engine-api-key-route.d.ts.map

package/dist/server/agent-engine-api-key-route.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-engine-api-key-route.d.ts","sourceRoot":"","sources":["../../src/server/agent-engine-api-key-route.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,OAAO,EACb,MAAM,IAAI,CAAC;AAeZ,KAAK,sBAAsB,GAAG,MAAM,GAAG,KAAK,CAAC;AAE7C,MAAM,WAAW,4BAA4B;IAC3C,KAAK,EAAE,sBAAsB,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,iCAAiC,CAAC,IAAI,EAAE,OAAO,GAC3D;IACE,EAAE,EAAE,IAAI,CAAC;IACT,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,sBAAsB,CAAC;CAC/B,GACD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAgDnD;AAED,wBAAsB,mCAAmC,CACvD,KAAK,EAAE,OAAO,EACd,KAAK,EAAE,sBAAsB,GAC5B,OAAO,CACN;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,4BAA4B,CAAA;CAAE,GAClD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CACnD,CA6BA;AAED,wBAAgB,8BAA8B;;;;;;;;;;IAqC7C"}

package/dist/server/agent-engine-api-key-route.js

@@ -0,0 +1,105 @@
+import { defineEventHandler, getMethod, setResponseStatus, } from "h3";
+import { PROVIDER_ENV_META } from "../agent/engine/provider-env-vars.js";
+import { getOrgContext } from "../org/context.js";
+import { writeAppSecret } from "../secrets/storage.js";
+import { getSession } from "./auth.js";
+import { readBody } from "./h3-helpers.js";
+const PROVIDER_TO_ENV_VAR = new Map(Object.entries(PROVIDER_ENV_META).map(([provider, meta]) => [
+    provider,
+    meta.envVar,
+]));
+const PROVIDER_ENV_VAR_KEYS = new Set(PROVIDER_TO_ENV_VAR.values());
+export function normalizeAgentEngineApiKeyPayload(body) {
+    const payload = body && typeof body === "object" ? body : {};
+    const raw = payload;
+    const key = typeof raw.key === "string"
+        ? raw.key.trim()
+        : typeof raw.provider === "string"
+            ? (PROVIDER_TO_ENV_VAR.get(raw.provider.trim()) ?? "")
+            : "";
+    if (!key || !PROVIDER_ENV_VAR_KEYS.has(key)) {
+        return {
+            ok: false,
+            statusCode: 400,
+            error: "Unsupported agent engine provider key.",
+        };
+    }
+    const value = typeof raw.value === "string"
+        ? raw.value.trim()
+        : typeof raw.apiKey === "string"
+            ? raw.apiKey.trim()
+            : "";
+    if (!value) {
+        return { ok: false, statusCode: 400, error: "value is required" };
+    }
+    if (raw.scope != null && raw.scope !== "user" && raw.scope !== "org") {
+        return {
+            ok: false,
+            statusCode: 400,
+            error: 'scope must be "user" or "org"',
+        };
+    }
+    return {
+        ok: true,
+        key,
+        value,
+        scope: raw.scope === "org" ? "org" : "user",
+    };
+}
+export async function resolveAgentEngineApiKeyWriteTarget(event, scope) {
+    const session = await getSession(event).catch(() => null);
+    if (!session?.email) {
+        return { ok: false, statusCode: 401, error: "Authentication required" };
+    }
+    if (scope === "user") {
+        return {
+            ok: true,
+            target: { scope: "user", scopeId: session.email },
+        };
+    }
+    const ctx = await getOrgContext(event).catch(() => null);
+    if (!ctx?.orgId) {
+        return { ok: false, statusCode: 400, error: "No active organization" };
+    }
+    if (ctx.role !== "owner" && ctx.role !== "admin") {
+        return {
+            ok: false,
+            statusCode: 403,
+            error: "Only organization owners and admins can set org-scoped keys",
+        };
+    }
+    return {
+        ok: true,
+        target: { scope: "org", scopeId: ctx.orgId },
+    };
+}
+export function createAgentEngineApiKeyHandler() {
+    return defineEventHandler(async (event) => {
+        if (getMethod(event) !== "POST") {
+            setResponseStatus(event, 405);
+            return { error: "Method not allowed" };
+        }
+        const payload = normalizeAgentEngineApiKeyPayload(await readBody(event).catch(() => ({})));
+        if (!payload.ok) {
+            setResponseStatus(event, payload.statusCode);
+            return { error: payload.error };
+        }
+        const resolved = await resolveAgentEngineApiKeyWriteTarget(event, payload.scope);
+        if (!resolved.ok) {
+            setResponseStatus(event, resolved.statusCode);
+            return { error: resolved.error };
+        }
+        await writeAppSecret({
+            key: payload.key,
+            value: payload.value,
+            scope: resolved.target.scope,
+            scopeId: resolved.target.scopeId,
+        });
+        return {
+            ok: true,
+            key: payload.key,
+            scope: resolved.target.scope,
+        };
+    });
+}
+//# sourceMappingURL=agent-engine-api-key-route.js.map

package/dist/server/agent-engine-api-key-route.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-engine-api-key-route.js","sourceRoot":"","sources":["../../src/server/agent-engine-api-key-route.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,SAAS,EACT,iBAAiB,GAElB,MAAM,IAAI,CAAC;AACZ,OAAO,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAE3C,MAAM,mBAAmB,GAAG,IAAI,GAAG,CACjC,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;IAC1D,QAAQ;IACR,IAAI,CAAC,MAAM;CACZ,CAAC,CACH,CAAC;AACF,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,mBAAmB,CAAC,MAAM,EAAE,CAAC,CAAC;AASpE,MAAM,UAAU,iCAAiC,CAAC,IAAa;IAQ7D,MAAM,OAAO,GAAG,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7D,MAAM,GAAG,GAAG,OAMX,CAAC;IAEF,MAAM,GAAG,GACP,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ;QACzB,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE;QAChB,CAAC,CAAC,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ;YAChC,CAAC,CAAC,CAAC,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;YACtD,CAAC,CAAC,EAAE,CAAC;IACX,IAAI,CAAC,GAAG,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5C,OAAO;YACL,EAAE,EAAE,KAAK;YACT,UAAU,EAAE,GAAG;YACf,KAAK,EAAE,wCAAwC;SAChD,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GACT,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ;QAC3B,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE;QAClB,CAAC,CAAC,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ;YAC9B,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE;YACnB,CAAC,CAAC,EAAE,CAAC;IACX,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC;IACpE,CAAC;IAED,IAAI,GAAG,CAAC,KAAK,IAAI,IAAI,IAAI,GAAG,CAAC,KAAK,KAAK,MAAM,IAAI,GAAG,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;QACrE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,UAAU,EAAE,GAAG;YACf,KAAK,EAAE,+BAA+B;SACvC,CAAC;IACJ,CAAC;IAED,OAAO;QACL,EAAE,EAAE,IAAI;QACR,GAAG;QACH,KAAK;QACL,KAAK,EAAE,GAAG,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM;KAC5C,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACvD,KAAc,EACd,KAA6B;IAK7B,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAC1D,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC;QACpB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;IAC1E,CAAC;IAED,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QACrB,OAAO;YACL,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,EAAE;SAClD,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACzD,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC;QAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC;IACzE,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACjD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,UAAU,EAAE,GAAG;YACf,KAAK,EAAE,6DAA6D;SACrE,CAAC;IACJ,CAAC;IAED,OAAO;QACL,EAAE,EAAE,IAAI;QACR,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,EAAE;KAC7C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,8BAA8B;IAC5C,OAAO,kBAAkB,CAAC,KAAK,EAAE,KAAc,EAAE,EAAE;QACjD,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,MAAM,EAAE,CAAC;YAChC,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;QACzC,CAAC;QAED,MAAM,OAAO,GAAG,iCAAiC,CAC/C,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CACxC,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;YAC7C,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;QAClC,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,mCAAmC,CACxD,KAAK,EACL,OAAO,CAAC,KAAK,CACd,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,iBAAiB,CAAC,KAAK,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;YAC9C,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;QACnC,CAAC;QAED,MAAM,cAAc,CAAC;YACnB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,KAAK;YAC5B,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,OAAO;SACjC,CAAC,CAAC;QAEH,OAAO;YACL,EAAE,EAAE,IAAI;YACR,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,KAAK;SAC7B,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import {\n  defineEventHandler,\n  getMethod,\n  setResponseStatus,\n  type H3Event,\n} from \"h3\";\nimport { PROVIDER_ENV_META } from \"../agent/engine/provider-env-vars.js\";\nimport { getOrgContext } from \"../org/context.js\";\nimport { writeAppSecret } from \"../secrets/storage.js\";\nimport { getSession } from \"./auth.js\";\nimport { readBody } from \"./h3-helpers.js\";\n\nconst PROVIDER_TO_ENV_VAR = new Map(\n  Object.entries(PROVIDER_ENV_META).map(([provider, meta]) => [\n    provider,\n    meta.envVar,\n  ]),\n);\nconst PROVIDER_ENV_VAR_KEYS = new Set(PROVIDER_TO_ENV_VAR.values());\n\ntype AgentEngineApiKeyScope = \"user\" | \"org\";\n\nexport interface AgentEngineApiKeyWriteTarget {\n  scope: AgentEngineApiKeyScope;\n  scopeId: string;\n}\n\nexport function normalizeAgentEngineApiKeyPayload(body: unknown):\n  | {\n      ok: true;\n      key: string;\n      value: string;\n      scope: AgentEngineApiKeyScope;\n    }\n  | { ok: false; statusCode: number; error: string } {\n  const payload = body && typeof body === \"object\" ? body : {};\n  const raw = payload as {\n    key?: unknown;\n    provider?: unknown;\n    value?: unknown;\n    apiKey?: unknown;\n    scope?: unknown;\n  };\n\n  const key =\n    typeof raw.key === \"string\"\n      ? raw.key.trim()\n      : typeof raw.provider === \"string\"\n        ? (PROVIDER_TO_ENV_VAR.get(raw.provider.trim()) ?? \"\")\n        : \"\";\n  if (!key || !PROVIDER_ENV_VAR_KEYS.has(key)) {\n    return {\n      ok: false,\n      statusCode: 400,\n      error: \"Unsupported agent engine provider key.\",\n    };\n  }\n\n  const value =\n    typeof raw.value === \"string\"\n      ? raw.value.trim()\n      : typeof raw.apiKey === \"string\"\n        ? raw.apiKey.trim()\n        : \"\";\n  if (!value) {\n    return { ok: false, statusCode: 400, error: \"value is required\" };\n  }\n\n  if (raw.scope != null && raw.scope !== \"user\" && raw.scope !== \"org\") {\n    return {\n      ok: false,\n      statusCode: 400,\n      error: 'scope must be \"user\" or \"org\"',\n    };\n  }\n\n  return {\n    ok: true,\n    key,\n    value,\n    scope: raw.scope === \"org\" ? \"org\" : \"user\",\n  };\n}\n\nexport async function resolveAgentEngineApiKeyWriteTarget(\n  event: H3Event,\n  scope: AgentEngineApiKeyScope,\n): Promise<\n  | { ok: true; target: AgentEngineApiKeyWriteTarget }\n  | { ok: false; statusCode: number; error: string }\n> {\n  const session = await getSession(event).catch(() => null);\n  if (!session?.email) {\n    return { ok: false, statusCode: 401, error: \"Authentication required\" };\n  }\n\n  if (scope === \"user\") {\n    return {\n      ok: true,\n      target: { scope: \"user\", scopeId: session.email },\n    };\n  }\n\n  const ctx = await getOrgContext(event).catch(() => null);\n  if (!ctx?.orgId) {\n    return { ok: false, statusCode: 400, error: \"No active organization\" };\n  }\n  if (ctx.role !== \"owner\" && ctx.role !== \"admin\") {\n    return {\n      ok: false,\n      statusCode: 403,\n      error: \"Only organization owners and admins can set org-scoped keys\",\n    };\n  }\n\n  return {\n    ok: true,\n    target: { scope: \"org\", scopeId: ctx.orgId },\n  };\n}\n\nexport function createAgentEngineApiKeyHandler() {\n  return defineEventHandler(async (event: H3Event) => {\n    if (getMethod(event) !== \"POST\") {\n      setResponseStatus(event, 405);\n      return { error: \"Method not allowed\" };\n    }\n\n    const payload = normalizeAgentEngineApiKeyPayload(\n      await readBody(event).catch(() => ({})),\n    );\n    if (!payload.ok) {\n      setResponseStatus(event, payload.statusCode);\n      return { error: payload.error };\n    }\n\n    const resolved = await resolveAgentEngineApiKeyWriteTarget(\n      event,\n      payload.scope,\n    );\n    if (!resolved.ok) {\n      setResponseStatus(event, resolved.statusCode);\n      return { error: resolved.error };\n    }\n\n    await writeAppSecret({\n      key: payload.key,\n      value: payload.value,\n      scope: resolved.target.scope,\n      scopeId: resolved.target.scopeId,\n    });\n\n    return {\n      ok: true,\n      key: payload.key,\n      scope: resolved.target.scope,\n    };\n  });\n}\n"]}

package/dist/server/agent-teams.d.ts

@@ -22,6 +22,42 @@ import type { RunEvent } from "../agent/types.js";
 import { type AgentTeamRunPayload } from "./agent-teams-run-queue.js";
 import type { BackgroundAgentRun, BackgroundAgentRunStatus, BackgroundAgentTranscriptEvent } from "../code-agents/background-run.js";
 import type { BackgroundAgentController } from "../code-agents/index.js";
+/**
+ * Run `fn` with `depth` recorded as the ambient delegation depth so any
+ * `spawnTask` call made transitively from `fn` knows the depth of the agent
+ * doing the spawning.
+ */
+declare function runWithDelegationDepth<T>(depth: number, fn: () => T | Promise<T>): T | Promise<T>;
+/** Depth of the agent currently executing (0 = top-level chat). */
+declare function currentAmbientDelegationDepth(): number;
+/**
+ * Public read of the ambient sub-agent delegation depth for the currently
+ * executing agent. 0 = the top-level (user-facing) chat; 1+ = a spawned
+ * sub-agent. Used by the chat plugin to thread the depth into
+ * `buildRuntimeContextPrompt` so a sub-agent at the cap is told it can't
+ * delegate further. Mirrors `currentAmbientDelegationDepth`; exported under a
+ * descriptive name so callers outside this module don't depend on the private
+ * helper or the test-only export object.
+ */
+export declare function getCurrentDelegationDepth(): number;
+export interface SubagentDepthDecision {
+    /** Whether the spawn is allowed under the depth cap. */
+    allowed: boolean;
+    /** Depth of the agent doing the spawning (parent). */
+    parentDepth: number;
+    /** Depth the spawned sub-agent would have (parentDepth + 1). */
+    childDepth: number;
+    /** The effective cap (resolved from env, clamped). */
+    maxDepth: number;
+    /** Human-readable refusal message when `allowed` is false. */
+    error?: string;
+}
+/**
+ * Decide whether an agent at `parentDepth` may spawn another sub-agent. The
+ * child would sit at `parentDepth + 1`; a child deeper than `maxDepth` is
+ * refused. Pure + exported so the enforcement is unit-testable and reusable.
+ */
+export declare function evaluateSubagentDepth(parentDepth: number, env?: Record<string, string | undefined>): SubagentDepthDecision;
 /** Framework route the self-fire dispatch targets to run a queued sub-agent in
  * a fresh function invocation. Mounted inside the agent-chat plugin (where the
  * sub-agent action/prompt/engine closures live). */
@@ -42,6 +78,12 @@ export interface AgentTask {
     completedAt?: number;
     runId?: string;
     error?: string;
+    /**
+     * Delegation depth of THIS sub-agent: 1 for a sub-agent spawned by the
+     * top-level chat, 2 for a sub-agent spawned by a depth-1 sub-agent, etc.
+     * Drives the runaway-delegation guardrail (see `evaluateSubagentDepth`).
+     */
+    delegationDepth?: number;
 }
 export type AgentTeamBackgroundRun = Omit<BackgroundAgentRun, "kind" | "source" | "sourceRecord" | "status" | "cwd" | "goalId" | "transcriptPath" | "artifactRoot"> & {
     kind: "agent-team";
@@ -154,6 +196,23 @@ export interface SpawnTaskOptions {
     parentThreadId?: string;
     /** Display name for the sub-agent tab (carried into the dispatch payload). */
     name?: string;
+    /**
+     * Delegation depth of the agent doing the spawning (the parent). Top-level
+     * chat is 0. When omitted, the depth is read from the ambient run context
+     * (set by `processAgentTeamRun` when a sub-agent is itself running), so a
+     * sub-agent that reaches `spawnTask` inherits its own depth automatically.
+     * The spawned sub-agent's depth is `parentDelegationDepth + 1`.
+     */
+    parentDelegationDepth?: number;
+}
+/**
+ * Error thrown when a spawn is refused because it would exceed the delegation
+ * depth cap. Carries the structured decision so callers (and the tool layer)
+ * can surface a precise message to the parent agent.
+ */
+export declare class SubagentDelegationDepthError extends Error {
+    readonly decision: SubagentDepthDecision;
+    constructor(decision: SubagentDepthDecision);
 }
 /**
  * Spawn a sub-agent task. Creates a thread, starts a background agent run,
@@ -226,6 +285,9 @@ export declare const _agentTeamsQueueForTests: {
     drainQueuedTaskMessages: typeof drainQueuedTaskMessages;
     formatQueuedTaskMessages: typeof formatQueuedTaskMessages;
     resolveTaskCompletion: typeof resolveTaskCompletion;
+    evaluateSubagentDepth: typeof evaluateSubagentDepth;
+    runWithDelegationDepth: typeof runWithDelegationDepth;
+    currentAmbientDelegationDepth: typeof currentAmbientDelegationDepth;
 };
 export {};
 //# sourceMappingURL=agent-teams.d.ts.map

package/dist/server/agent-teams.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-teams.d.ts","sourceRoot":"","sources":["../../src/server/agent-teams.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,KAAK,EACV,WAAW,EACX,2BAA2B,EAC5B,MAAM,8BAA8B,CAAC;AAEtC,OAAO,KAAK,EAAE,WAAW,EAAiB,MAAM,0BAA0B,CAAC;AAE3E,OAAO,EAML,KAAK,SAAS,EACf,MAAM,yBAAyB,CAAC;AAWjC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAMlD,OAAO,EAYL,KAAK,mBAAmB,EACzB,MAAM,4BAA4B,CAAC;AAIpC,OAAO,KAAK,EACV,kBAAkB,EAClB,wBAAwB,EACxB,8BAA8B,EAC/B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EACV,yBAAyB,EAK1B,MAAM,yBAAyB,CAAC;AAYjC;;oDAEoD;AACpD,eAAO,MAAM,2BAA2B,4CACG,CAAC;AAK5C,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,SAAS,CAAC;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,sBAAsB,GAAG,IAAI,CACvC,kBAAkB,EAChB,MAAM,GACN,QAAQ,GACR,cAAc,GACd,QAAQ,GACR,KAAK,GACL,QAAQ,GACR,gBAAgB,GAChB,cAAc,CACjB,GAAG;IACF,IAAI,EAAE,YAAY,CAAC;IACnB,MAAM,EAAE,mBAAmB,CAAC;IAC5B,YAAY,EAAE;QACZ,IAAI,EAAE,iBAAiB,CAAC;QACxB,EAAE,EAAE,MAAM,CAAC;QACX,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,MAAM,EAAE,wBAAwB,CAAC;IACjC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,YAAY,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,kCAAkC,GAAG,IAAI,CACnD,8BAA8B,EAC9B,MAAM,GAAG,QAAQ,GAAG,cAAc,CACnC,GAAG;IACF,IAAI,EAAE,MAAM,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,GAAG,QAAQ,CAAC;IACzD,MAAM,EAAE,mBAAmB,CAAC;IAC5B,YAAY,EAAE;QACZ,IAAI,EAAE,sBAAsB,CAAC;QAC7B,EAAE,EAAE,MAAM,CAAC;QACX,GAAG,EAAE,MAAM,CAAC;KACb,CAAC;CACH,CAAC;AAEF,MAAM,WAAW,kCAAkC;IACjD,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,mCAAmC;IAClD,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,wCAAwC,IAAI,yBAAyB,CAWpF;AAED,eAAO,MAAM,kCAAkC,2BACH,CAAC;AAyB7C,MAAM,WAAW,yBAAyB;IACxC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,WAAW,GAAG,SAAS,CAAC;IAChC,oBAAoB,EAAE,OAAO,CAAC;IAC9B,cAAc,EAAE,MAAM,CAAC;IACvB,oBAAoB,EAAE,OAAO,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;CACnB;AA4DD;;;;GAIG;AACH,wBAAsB,+BAA+B,CACnD,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,yBAAyB,EAAE,CAAC,CAiBtC;AAED;;;GAGG;AACH,wBAAgB,gCAAgC,CAC9C,UAAU,EAAE,yBAAyB,EAAE,GACtC,MAAM,CAER;AAID,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,cAAc,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AA6BD,iBAAS,wBAAwB,CAAC,QAAQ,EAAE,iBAAiB,EAAE,GAAG,MAAM,CAYvE;AA2DD,iBAAe,uBAAuB,CACpC,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAS9B;AAiBD,iBAAS,yBAAyB,CAChC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GACnC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAgC7B;AAED,iBAAS,2BAA2B,CAClC,MAAM,EAAE,MAAM,GACb,2BAA2B,CAc7B;AA2MD;;;;;GAKG;AACH,wBAAsB,8BAA8B,CAClD,KAAK,EAAE,MAAM,EACb,KAAK,CAAC,EAAE,GAAG,GACV,OAAO,CAAC,IAAI,CAAC,CAef;AAwED,KAAK,sBAAsB,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAC;AAuFnE,iBAAS,qBAAqB,CAC5B,GAAG,EAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,GAAG,aAAa,CAAC,EAC9C,eAAe,EAAE,MAAM,EACvB,OAAO,CAAC,EAAE;IAAE,oBAAoB,CAAC,EAAE,OAAO,CAAA;CAAE,GAC3C;IACD,UAAU,EAAE,WAAW,GAAG,SAAS,CAAC;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,sBAAsB,CAAC;IACvC,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CA0CA;AAED,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,SAAS,GACd,sBAAsB,CAmDxB;AAiGD,wBAAgB,oCAAoC,CAClD,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,QAAQ,EACf,OAAO,GAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAO,GACnD,kCAAkC,GAAG,IAAI,CA2B3C;AAED,MAAM,WAAW,gBAAgB;IAC/B,kDAAkD;IAClD,WAAW,EAAE,MAAM,CAAC;IACpB,uDAAuD;IACvD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,sEAAsE;IACtE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,0CAA0C;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB,+CAA+C;IAC/C,YAAY,EAAE,MAAM,CAAC;IACrB,0CAA0C;IAC1C,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACrC,mFAAmF;IACnF,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,kEAAkE;IAClE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,wDAAwD;IACxD,UAAU,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,IAAI,CAAC;IAC5C,0EAA0E;IAC1E,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,8EAA8E;IAC9E,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;GAGG;AACH,wBAAsB,SAAS,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,SAAS,CAAC,CA4H1E;AA0LD,0EAA0E;AAC1E,MAAM,WAAW,kBAAkB;IACjC,gBAAgB,EAAE,MAAM,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACrC,MAAM,EAAE,WAAW,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,0BAA0B;IACzC,MAAM,EAAE,MAAM,CAAC;IACf;kFAC8E;IAC9E,IAAI,CAAC,EAAE,OAAO,GAAG,UAAU,CAAC;IAC5B;kCAC8B;IAC9B,KAAK,CAAC,EAAE,GAAG,CAAC;IACZ;8EAC0E;IAC1E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;4EAEwE;IACxE,aAAa,EAAE,CAAC,GAAG,EAAE;QACnB,OAAO,EAAE,mBAAmB,CAAC;QAC7B,UAAU,EAAE,MAAM,CAAC;QACnB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;KACtB,KAAK,OAAO,CAAC,kBAAkB,CAAC,CAAC;CACnC;AAED;;;;;;;GAOG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,0BAA0B,GAC/B,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAwS5C;AAED,qBAAqB;AACrB,wBAAsB,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,CAG5E;AAED,4BAA4B;AAC5B,wBAAsB,eAAe,CACnC,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,CAGhC;AAED,yCAAyC;AACzC,wBAAsB,SAAS,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC,CAStD;AAED,wBAAsB,2BAA2B,IAAI,OAAO,CAC1D,sBAAsB,EAAE,CACzB,CAEA;AAED,wBAAsB,yBAAyB,CAC7C,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAKxC;AAED,wBAAsB,uCAAuC,CAC3D,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,kCAAkC,EAAE,CAAC,CA0B/C;AAED,wBAAgB,iCAAiC,CAC/C,KAAK,EAAE,MAAM,EACb,OAAO,SAAI,GACV,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAKnC;AAmCD,yEAAyE;AACzE,wBAAsB,UAAU,CAC9B,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,GACd,OAAO,CAAC;IACT,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC,CAoBD;AAED,wBAAsB,4BAA4B,CAChD,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,kCAAkC,CAAC,CAE7C;AAmDD,wBAAsB,0BAA0B,CAC9C,KAAK,EAAE,MAAM,EACb,MAAM,SAAS,GACd,OAAO,CAAC,mCAAmC,CAAC,CAsB9C;AAED,6BAA6B;AAC7B,wBAAsB,eAAe,CACnC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC,CAcf;AAED,eAAO,MAAM,wBAAwB;;;;;;CAMpC,CAAC"}
+{"version":3,"file":"agent-teams.d.ts","sourceRoot":"","sources":["../../src/server/agent-teams.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,KAAK,EACV,WAAW,EACX,2BAA2B,EAC5B,MAAM,8BAA8B,CAAC;AAEtC,OAAO,KAAK,EAAE,WAAW,EAAiB,MAAM,0BAA0B,CAAC;AAE3E,OAAO,EAML,KAAK,SAAS,EACf,MAAM,yBAAyB,CAAC;AAWjC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAMlD,OAAO,EAYL,KAAK,mBAAmB,EACzB,MAAM,4BAA4B,CAAC;AAIpC,OAAO,KAAK,EACV,kBAAkB,EAClB,wBAAwB,EACxB,8BAA8B,EAC/B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EACV,yBAAyB,EAK1B,MAAM,yBAAyB,CAAC;AA0BjC;;;;GAIG;AACH,iBAAS,sBAAsB,CAAC,CAAC,EAC/B,KAAK,EAAE,MAAM,EACb,EAAE,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,GACvB,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAEhB;AAED,mEAAmE;AACnE,iBAAS,6BAA6B,IAAI,MAAM,CAE/C;AAED;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,IAAI,MAAM,CAElD;AAED,MAAM,WAAW,qBAAqB;IACpC,wDAAwD;IACxD,OAAO,EAAE,OAAO,CAAC;IACjB,sDAAsD;IACtD,WAAW,EAAE,MAAM,CAAC;IACpB,gEAAgE;IAChE,UAAU,EAAE,MAAM,CAAC;IACnB,sDAAsD;IACtD,QAAQ,EAAE,MAAM,CAAC;IACjB,8DAA8D;IAC9D,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,WAAW,EAAE,MAAM,EACnB,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GACpD,qBAAqB,CAgBvB;AAED;;oDAEoD;AACpD,eAAO,MAAM,2BAA2B,4CACG,CAAC;AAK5C,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,SAAS,CAAC;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,MAAM,sBAAsB,GAAG,IAAI,CACvC,kBAAkB,EAChB,MAAM,GACN,QAAQ,GACR,cAAc,GACd,QAAQ,GACR,KAAK,GACL,QAAQ,GACR,gBAAgB,GAChB,cAAc,CACjB,GAAG;IACF,IAAI,EAAE,YAAY,CAAC;IACnB,MAAM,EAAE,mBAAmB,CAAC;IAC5B,YAAY,EAAE;QACZ,IAAI,EAAE,iBAAiB,CAAC;QACxB,EAAE,EAAE,MAAM,CAAC;QACX,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,MAAM,EAAE,wBAAwB,CAAC;IACjC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,YAAY,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,kCAAkC,GAAG,IAAI,CACnD,8BAA8B,EAC9B,MAAM,GAAG,QAAQ,GAAG,cAAc,CACnC,GAAG;IACF,IAAI,EAAE,MAAM,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,GAAG,QAAQ,CAAC;IACzD,MAAM,EAAE,mBAAmB,CAAC;IAC5B,YAAY,EAAE;QACZ,IAAI,EAAE,sBAAsB,CAAC;QAC7B,EAAE,EAAE,MAAM,CAAC;QACX,GAAG,EAAE,MAAM,CAAC;KACb,CAAC;CACH,CAAC;AAEF,MAAM,WAAW,kCAAkC;IACjD,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,mCAAmC;IAClD,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,wCAAwC,IAAI,yBAAyB,CAWpF;AAED,eAAO,MAAM,kCAAkC,2BACH,CAAC;AAyB7C,MAAM,WAAW,yBAAyB;IACxC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,WAAW,GAAG,SAAS,CAAC;IAChC,oBAAoB,EAAE,OAAO,CAAC;IAC9B,cAAc,EAAE,MAAM,CAAC;IACvB,oBAAoB,EAAE,OAAO,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;CACnB;AA4DD;;;;GAIG;AACH,wBAAsB,+BAA+B,CACnD,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,yBAAyB,EAAE,CAAC,CAiBtC;AAED;;;GAGG;AACH,wBAAgB,gCAAgC,CAC9C,UAAU,EAAE,yBAAyB,EAAE,GACtC,MAAM,CAER;AAID,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,cAAc,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AA6BD,iBAAS,wBAAwB,CAAC,QAAQ,EAAE,iBAAiB,EAAE,GAAG,MAAM,CAYvE;AA2DD,iBAAe,uBAAuB,CACpC,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAS9B;AAiBD,iBAAS,yBAAyB,CAChC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GACnC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAgC7B;AAED,iBAAS,2BAA2B,CAClC,MAAM,EAAE,MAAM,GACb,2BAA2B,CAc7B;AA2MD;;;;;GAKG;AACH,wBAAsB,8BAA8B,CAClD,KAAK,EAAE,MAAM,EACb,KAAK,CAAC,EAAE,GAAG,GACV,OAAO,CAAC,IAAI,CAAC,CAef;AAwED,KAAK,sBAAsB,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAC;AAuFnE,iBAAS,qBAAqB,CAC5B,GAAG,EAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,GAAG,aAAa,CAAC,EAC9C,eAAe,EAAE,MAAM,EACvB,OAAO,CAAC,EAAE;IAAE,oBAAoB,CAAC,EAAE,OAAO,CAAA;CAAE,GAC3C;IACD,UAAU,EAAE,WAAW,GAAG,SAAS,CAAC;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,sBAAsB,CAAC;IACvC,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CA0CA;AAED,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,SAAS,GACd,sBAAsB,CAmDxB;AAiGD,wBAAgB,oCAAoC,CAClD,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,QAAQ,EACf,OAAO,GAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAO,GACnD,kCAAkC,GAAG,IAAI,CA2B3C;AAED,MAAM,WAAW,gBAAgB;IAC/B,kDAAkD;IAClD,WAAW,EAAE,MAAM,CAAC;IACpB,uDAAuD;IACvD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,sEAAsE;IACtE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,0CAA0C;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB,+CAA+C;IAC/C,YAAY,EAAE,MAAM,CAAC;IACrB,0CAA0C;IAC1C,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACrC,mFAAmF;IACnF,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,kEAAkE;IAClE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,wDAAwD;IACxD,UAAU,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,IAAI,CAAC;IAC5C,0EAA0E;IAC1E,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,8EAA8E;IAC9E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;;OAMG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC;AAED;;;;GAIG;AACH,qBAAa,4BAA6B,SAAQ,KAAK;IACrD,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,CAAC;gBAC7B,QAAQ,EAAE,qBAAqB;CAQ5C;AAED;;;GAGG;AACH,wBAAsB,SAAS,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,SAAS,CAAC,CA4I1E;AA0LD,0EAA0E;AAC1E,MAAM,WAAW,kBAAkB;IACjC,gBAAgB,EAAE,MAAM,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACrC,MAAM,EAAE,WAAW,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,0BAA0B;IACzC,MAAM,EAAE,MAAM,CAAC;IACf;kFAC8E;IAC9E,IAAI,CAAC,EAAE,OAAO,GAAG,UAAU,CAAC;IAC5B;kCAC8B;IAC9B,KAAK,CAAC,EAAE,GAAG,CAAC;IACZ;8EAC0E;IAC1E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;4EAEwE;IACxE,aAAa,EAAE,CAAC,GAAG,EAAE;QACnB,OAAO,EAAE,mBAAmB,CAAC;QAC7B,UAAU,EAAE,MAAM,CAAC;QACnB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;KACtB,KAAK,OAAO,CAAC,kBAAkB,CAAC,CAAC;CACnC;AAED;;;;;;;GAOG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,0BAA0B,GAC/B,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAiT5C;AAED,qBAAqB;AACrB,wBAAsB,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,CAG5E;AAED,4BAA4B;AAC5B,wBAAsB,eAAe,CACnC,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,CAGhC;AAED,yCAAyC;AACzC,wBAAsB,SAAS,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC,CAStD;AAED,wBAAsB,2BAA2B,IAAI,OAAO,CAC1D,sBAAsB,EAAE,CACzB,CAEA;AAED,wBAAsB,yBAAyB,CAC7C,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAKxC;AAED,wBAAsB,uCAAuC,CAC3D,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,kCAAkC,EAAE,CAAC,CA0B/C;AAED,wBAAgB,iCAAiC,CAC/C,KAAK,EAAE,MAAM,EACb,OAAO,SAAI,GACV,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAKnC;AAmCD,yEAAyE;AACzE,wBAAsB,UAAU,CAC9B,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,GACd,OAAO,CAAC;IACT,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC,CAoBD;AAED,wBAAsB,4BAA4B,CAChD,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,kCAAkC,CAAC,CAE7C;AAmDD,wBAAsB,0BAA0B,CAC9C,KAAK,EAAE,MAAM,EACb,MAAM,SAAS,GACd,OAAO,CAAC,mCAAmC,CAAC,CAsB9C;AAED,6BAA6B;AAC7B,wBAAsB,eAAe,CACnC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC,CAcf;AAED,eAAO,MAAM,wBAAwB;;;;;;;;;CASpC,CAAC"}

package/dist/server/agent-teams.js

@@ -27,6 +27,65 @@ import { fireInternalDispatch } from "./self-dispatch.js";
 import { resolveOrgIdForEmail } from "../org/context.js";
 import { readAppState, writeAppState, listAppState, deleteAppState, } from "../application-state/script-helpers.js";
 import { getRequestUserEmail, runWithRequestContext, } from "./request-context.js";
+import { AsyncLocalStorage } from "node:async_hooks";
+import { resolveMaxSubagentDelegationDepth } from "../agent/runtime-context.js";
+/**
+ * Ambient delegation depth for the agent whose run is currently executing.
+ *
+ * `processAgentTeamRun` runs each sub-agent inside `runWithDelegationDepth(d)`
+ * where `d` is that sub-agent's own depth. So if a sub-agent calls `spawnTask`
+ * (e.g. because tool-stripping was bypassed and it was handed the `agent-teams`
+ * tool anyway), the spawn path reads its parent's depth from here and refuses
+ * once the cap is reached — independent of any tool-level guard. The top-level
+ * chat runs outside this storage, so its ambient depth is 0.
+ */
+const delegationDepthStorage = new AsyncLocalStorage();
+/**
+ * Run `fn` with `depth` recorded as the ambient delegation depth so any
+ * `spawnTask` call made transitively from `fn` knows the depth of the agent
+ * doing the spawning.
+ */
+function runWithDelegationDepth(depth, fn) {
+    return delegationDepthStorage.run(Math.max(0, Math.floor(depth || 0)), fn);
+}
+/** Depth of the agent currently executing (0 = top-level chat). */
+function currentAmbientDelegationDepth() {
+    return delegationDepthStorage.getStore() ?? 0;
+}
+/**
+ * Public read of the ambient sub-agent delegation depth for the currently
+ * executing agent. 0 = the top-level (user-facing) chat; 1+ = a spawned
+ * sub-agent. Used by the chat plugin to thread the depth into
+ * `buildRuntimeContextPrompt` so a sub-agent at the cap is told it can't
+ * delegate further. Mirrors `currentAmbientDelegationDepth`; exported under a
+ * descriptive name so callers outside this module don't depend on the private
+ * helper or the test-only export object.
+ */
+export function getCurrentDelegationDepth() {
+    return currentAmbientDelegationDepth();
+}
+/**
+ * Decide whether an agent at `parentDepth` may spawn another sub-agent. The
+ * child would sit at `parentDepth + 1`; a child deeper than `maxDepth` is
+ * refused. Pure + exported so the enforcement is unit-testable and reusable.
+ */
+export function evaluateSubagentDepth(parentDepth, env = process.env) {
+    const safeParentDepth = Number.isFinite(parentDepth)
+        ? Math.max(0, Math.floor(parentDepth))
+        : 0;
+    const childDepth = safeParentDepth + 1;
+    const maxDepth = resolveMaxSubagentDelegationDepth(env);
+    const allowed = childDepth <= maxDepth;
+    return {
+        allowed,
+        parentDepth: safeParentDepth,
+        childDepth,
+        maxDepth,
+        error: allowed
+            ? undefined
+            : `Delegation depth limit reached (max ${maxDepth}); cannot spawn another sub-agent.`,
+    };
+}
 /** Framework route the self-fire dispatch targets to run a queued sub-agent in
  * a fresh function invocation. Mounted inside the agent-chat plugin (where the
  * sub-agent action/prompt/engine closures live). */
@@ -789,11 +848,38 @@ export function toAgentTaskBackgroundTranscriptEvent(runId, event, options = {})
         metadata,
     };
 }
+/**
+ * Error thrown when a spawn is refused because it would exceed the delegation
+ * depth cap. Carries the structured decision so callers (and the tool layer)
+ * can surface a precise message to the parent agent.
+ */
+export class SubagentDelegationDepthError extends Error {
+    decision;
+    constructor(decision) {
+        super(decision.error ??
+            `Delegation depth limit reached (max ${decision.maxDepth}); cannot spawn another sub-agent.`);
+        this.name = "SubagentDelegationDepthError";
+        this.decision = decision;
+    }
+}
 /**
  * Spawn a sub-agent task. Creates a thread, starts a background agent run,
  * and emits agent_task events to the parent chat stream.
  */
 export async function spawnTask(opts) {
+    // ── Delegation-depth guardrail ────────────────────────────────────────────
+    // Defensive, server-side enforcement that holds regardless of any tool-level
+    // stripping in the agent-chat plugin: a sub-agent cannot infinitely spawn
+    // sub-agents. The spawning agent's depth comes from the explicit option or,
+    // failing that, the ambient depth recorded while a sub-agent run executes.
+    const parentDepth = typeof opts.parentDelegationDepth === "number"
+        ? opts.parentDelegationDepth
+        : currentAmbientDelegationDepth();
+    const decision = evaluateSubagentDepth(parentDepth);
+    if (!decision.allowed) {
+        throw new SubagentDelegationDepthError(decision);
+    }
+    const childDepth = decision.childDepth;
     const taskId = generateTaskId();
     // Create a dedicated thread for the sub-agent with the task as the first message
     const thread = await createThread(opts.ownerEmail, {
@@ -842,6 +928,7 @@ export async function spawnTask(opts) {
         updatedAt: createdAt,
         startedAt: createdAt,
         runId,
+        delegationDepth: childDepth,
     };
     await saveTask(task);
     await startTaskProgressRun(task, opts.ownerEmail);
@@ -1176,7 +1263,14 @@ export async function processAgentTeamRun(opts) {
                         task.currentStep = "";
                     }
                 };
-                await runWithRequestContext({ userEmail: ownerEmail || undefined, orgId: orgId ?? undefined }, async () => {
+                await runWithRequestContext({ userEmail: ownerEmail || undefined, orgId: orgId ?? undefined }, 
+                // Record THIS sub-agent's own delegation depth as the ambient
+                // depth for the duration of its agent loop. If a tool call from
+                // within the loop reaches `spawnTask` (even with the team tool not
+                // stripped), the spawn path reads this depth and refuses once the
+                // cap is hit. Fall back to depth 1 for legacy tasks persisted
+                // before delegationDepth was tracked.
+                () => runWithDelegationDepth(task.delegationDepth ?? 1, async () => {
                     chunkUsage = await runAgentLoop({
                         engine: config.engine,
                         model: config.model,
@@ -1188,7 +1282,7 @@ export async function processAgentTeamRun(opts) {
                         signal,
                         finalResponseGuard: createTaskMessageFinalGuard(opts.taskId),
                     });
-                });
+                }));
             }, async (run) => {
                 clearInterval(heartbeat);
                 try {
@@ -1476,5 +1570,8 @@ export const _agentTeamsQueueForTests = {
     drainQueuedTaskMessages,
     formatQueuedTaskMessages,
     resolveTaskCompletion,
+    evaluateSubagentDepth,
+    runWithDelegationDepth,
+    currentAmbientDelegationDepth,
 };
 //# sourceMappingURL=agent-teams.js.map