@agimon-ai/po-team 0.0.0-alpha.0

package/dist/capabilityCeiling-C-Y7H8oC.cjs

@@ -0,0 +1,191 @@
+require("./environment-CaCW3SgT.cjs");
+let node_buffer = require("node:buffer");
+//#region src/schemas/team/capabilityCeiling.ts
+/**
+* Capability-ceiling values, intersection, and the child-process codec.
+*
+* Live extension contributions enter through Team's `doom/subagent-policy`
+* Cordis service. Only the resolved ceiling crosses a process boundary, through
+* the versioned environment value encoded here.
+*/
+const SUBAGENT_CAPABILITY_CEILING_VERSION = 2;
+const MAX_TEXT_BYTES = 256;
+const MAX_TOOL_NAME_BYTES = 128;
+const MAX_ALLOWED_TOOLS = 256;
+const MAX_ALLOWED_EXTERNAL_PROFILES = 32;
+const MAX_EXTERNAL_PROFILE_NAME_BYTES = 128;
+const EXTERNAL_PROFILE_PATTERN = /^[A-Za-z0-9][A-Za-z0-9/_.:-]+$/u;
+const TOOL_NAME_PATTERN = /^[A-Za-z0-9_.:-]+$/u;
+const LAST_C0_CONTROL_CODE = 31;
+const DELETE_CODE = 127;
+/**
+* Ceiling text crosses a process boundary and is rendered in the TUI, so control
+* characters are rejected. Scanning code points avoids a control-character
+* regex, which lints as a hazard even when the escapes are explicit.
+*/
+function hasControlCharacter(value) {
+	for (const character of value) {
+		const code = character.codePointAt(0);
+		if (code !== void 0 && (code <= LAST_C0_CONTROL_CODE || code === DELETE_CODE)) return true;
+	}
+	return false;
+}
+var SubagentCapabilityPolicyStore = class {
+	policies = /* @__PURE__ */ new Map();
+	register(policy, generation) {
+		const ceiling = normalizeCeiling({
+			...policy.allowedTools ? { allowedTools: policy.allowedTools } : {},
+			...policy.requiredTools ? { requiredTools: policy.requiredTools } : {},
+			...policy.allowMcpTools === true ? { allowMcpTools: true } : {},
+			...policy.allowedExternalProfiles ? { allowedExternalProfiles: policy.allowedExternalProfiles } : {},
+			denyExtensions: policy.denyExtensions === true
+		});
+		ceiling.sources = [policy.owner];
+		this.policies.set(policy.owner, {
+			generation,
+			ceiling
+		});
+	}
+	update(policy, generation) {
+		if (this.policies.get(policy.owner)?.generation !== generation) return;
+		this.register(policy, generation);
+	}
+	remove(owner, generation) {
+		if (this.policies.get(owner)?.generation === generation) this.policies.delete(owner);
+	}
+	clear() {
+		this.policies.clear();
+	}
+	resolve(inherited) {
+		return intersectSubagentCapabilityCeilings(inherited, ...[...this.policies.values()].map(({ ceiling }) => ceiling));
+	}
+};
+function validateText(value, field) {
+	if (typeof value !== "string" || !value.trim() || hasControlCharacter(value) || node_buffer.Buffer.byteLength(value.trim(), "utf8") > MAX_TEXT_BYTES) throw new Error(`Invalid capability ceiling ${field}; expected a non-empty string without control characters (max ${MAX_TEXT_BYTES} UTF-8 bytes).`);
+	return value.trim();
+}
+function normalizeCeiling(ceiling) {
+	if (!ceiling || typeof ceiling !== "object" || Array.isArray(ceiling)) throw new Error("Invalid capability ceiling; expected an object.");
+	const hasAllowedTools = Object.hasOwn(ceiling, "allowedTools");
+	const hasRequiredTools = Object.hasOwn(ceiling, "requiredTools");
+	const hasAllowMcpTools = Object.hasOwn(ceiling, "allowMcpTools");
+	const hasAllowedExternalProfiles = Object.hasOwn(ceiling, "allowedExternalProfiles");
+	const hasDenyExtensions = Object.hasOwn(ceiling, "denyExtensions");
+	if (!hasAllowedTools && !hasRequiredTools && !hasAllowMcpTools && !hasAllowedExternalProfiles && !hasDenyExtensions) throw new Error("Invalid capability ceiling; expected allowedTools, requiredTools, allowMcpTools, allowedExternalProfiles, or denyExtensions.");
+	if (hasAllowMcpTools && typeof ceiling.allowMcpTools !== "boolean") throw new Error("Invalid capability ceiling allowMcpTools; expected a boolean.");
+	if (hasDenyExtensions && typeof ceiling.denyExtensions !== "boolean") throw new Error("Invalid capability ceiling denyExtensions; expected a boolean.");
+	const normalizeTools = (value, field) => {
+		if (!Array.isArray(value)) throw new Error(`Invalid capability ceiling ${field}; expected an array.`);
+		if (value.length > MAX_ALLOWED_TOOLS) throw new Error(`Invalid capability ceiling ${field}; expected at most ${MAX_ALLOWED_TOOLS} names.`);
+		return [...new Set(value.map((tool) => {
+			const name = validateText(tool, `${field} entry`);
+			if (!TOOL_NAME_PATTERN.test(name)) throw new Error(`Invalid capability ceiling ${field} entry '${name}'.`);
+			if (node_buffer.Buffer.byteLength(name, "utf8") > MAX_TOOL_NAME_BYTES) throw new Error(`Invalid capability ceiling ${field} entry '${name}'; max ${MAX_TOOL_NAME_BYTES} UTF-8 bytes.`);
+			return name;
+		}))].sort((left, right) => left.localeCompare(right));
+	};
+	const allowedTools = hasAllowedTools ? normalizeTools(ceiling.allowedTools, "allowedTools") : void 0;
+	const requiredTools = hasRequiredTools ? normalizeTools(ceiling.requiredTools, "requiredTools") : void 0;
+	let allowedExternalProfiles = [];
+	if (Object.hasOwn(ceiling, "allowedExternalProfiles")) {
+		if (!Array.isArray(ceiling.allowedExternalProfiles)) throw new Error("Invalid capability ceiling allowedExternalProfiles; expected an array.");
+		if (ceiling.allowedExternalProfiles.length > MAX_ALLOWED_EXTERNAL_PROFILES) throw new Error(`Invalid capability ceiling allowedExternalProfiles; expected at most ${MAX_ALLOWED_EXTERNAL_PROFILES} names.`);
+		allowedExternalProfiles = [...new Set(ceiling.allowedExternalProfiles.map((profile) => {
+			const name = validateText(profile, "allowedExternalProfiles entry");
+			if (!EXTERNAL_PROFILE_PATTERN.test(name) || node_buffer.Buffer.byteLength(name, "utf8") > MAX_EXTERNAL_PROFILE_NAME_BYTES) throw new Error(`Invalid capability ceiling allowedExternalProfiles entry '${name}'.`);
+			return name;
+		}))].sort((left, right) => left.localeCompare(right));
+	}
+	return {
+		version: 2,
+		...allowedTools ? { allowedTools } : {},
+		...requiredTools?.length ? { requiredTools } : {},
+		...ceiling.allowMcpTools === true ? { allowMcpTools: true } : {},
+		allowedExternalProfiles,
+		denyExtensions: ceiling.denyExtensions === true,
+		sources: []
+	};
+}
+function parseSubagentCapabilityCeiling(value, field = "capability ceiling") {
+	if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error(`Invalid ${field}; expected an object.`);
+	const record = value;
+	if (record.version !== 2) throw new Error(`Invalid ${field} version.`);
+	const normalized = normalizeCeiling(record);
+	const sources = record.sources;
+	if (!Array.isArray(sources) || sources.some((source) => typeof source !== "string")) throw new Error(`Invalid ${field} sources; expected an array of strings.`);
+	normalized.sources = [...new Set(sources.map((source) => validateText(source, `${field} source`)))].sort();
+	return normalized;
+}
+function intersectSubagentCapabilityCeilings(...ceilings) {
+	const active = ceilings.filter((ceiling) => ceiling !== void 0);
+	if (active.length === 0) return void 0;
+	const definedLists = active.filter((ceiling) => ceiling.allowedTools !== void 0).map((ceiling) => new Set(ceiling.allowedTools));
+	let allowedTools;
+	if (definedLists.length > 0) allowedTools = [...definedLists[0]].filter((tool) => definedLists.every((list) => list.has(tool))).sort();
+	const requiredTools = [...new Set(active.flatMap((ceiling) => ceiling.requiredTools ?? []))].filter((tool) => !allowedTools || allowedTools.includes(tool)).sort((left, right) => left.localeCompare(right));
+	const profileSets = active.map((ceiling) => new Set(ceiling.allowedExternalProfiles));
+	const allowedExternalProfiles = [...profileSets[0]].filter((profile) => profileSets.every((profiles) => profiles.has(profile))).sort((left, right) => left.localeCompare(right));
+	return {
+		version: 2,
+		...allowedTools ? { allowedTools } : {},
+		...requiredTools.length ? { requiredTools } : {},
+		...active.every((ceiling) => ceiling.allowMcpTools === true) ? { allowMcpTools: true } : {},
+		allowedExternalProfiles,
+		denyExtensions: active.some((ceiling) => ceiling.denyExtensions),
+		sources: [...new Set(active.flatMap((ceiling) => ceiling.sources))].sort()
+	};
+}
+function encodeSubagentCapabilityCeiling(ceiling) {
+	if (!ceiling) return void 0;
+	return node_buffer.Buffer.from(JSON.stringify(ceiling), "utf8").toString("base64url");
+}
+function decodeSubagentCapabilityCeiling(value) {
+	if (value === void 0 || value === "") return void 0;
+	let parsed;
+	try {
+		parsed = JSON.parse(node_buffer.Buffer.from(value, "base64url").toString("utf8"));
+	} catch (error) {
+		throw new Error(`Invalid inherited capability ceiling: ${error instanceof Error ? error.message : String(error)}`);
+	}
+	if (!parsed || typeof parsed !== "object" || Array.isArray(parsed) || parsed.version !== 2) throw new Error("Invalid inherited capability ceiling version.");
+	return parseSubagentCapabilityCeiling(parsed, "inherited capability ceiling");
+}
+//#endregion
+Object.defineProperty(exports, "SUBAGENT_CAPABILITY_CEILING_VERSION", {
+	enumerable: true,
+	get: function() {
+		return SUBAGENT_CAPABILITY_CEILING_VERSION;
+	}
+});
+Object.defineProperty(exports, "SubagentCapabilityPolicyStore", {
+	enumerable: true,
+	get: function() {
+		return SubagentCapabilityPolicyStore;
+	}
+});
+Object.defineProperty(exports, "decodeSubagentCapabilityCeiling", {
+	enumerable: true,
+	get: function() {
+		return decodeSubagentCapabilityCeiling;
+	}
+});
+Object.defineProperty(exports, "encodeSubagentCapabilityCeiling", {
+	enumerable: true,
+	get: function() {
+		return encodeSubagentCapabilityCeiling;
+	}
+});
+Object.defineProperty(exports, "intersectSubagentCapabilityCeilings", {
+	enumerable: true,
+	get: function() {
+		return intersectSubagentCapabilityCeilings;
+	}
+});
+Object.defineProperty(exports, "parseSubagentCapabilityCeiling", {
+	enumerable: true,
+	get: function() {
+		return parseSubagentCapabilityCeiling;
+	}
+});
+
+//# sourceMappingURL=capabilityCeiling-C-Y7H8oC.cjs.map

package/dist/capabilityCeiling-C-Y7H8oC.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilityCeiling-C-Y7H8oC.cjs","names":["Buffer"],"sources":["../src/schemas/team/capabilityCeiling.ts"],"sourcesContent":["/**\n * Capability-ceiling values, intersection, and the child-process codec.\n *\n * Live extension contributions enter through Team's `doom/subagent-policy`\n * Cordis service. Only the resolved ceiling crosses a process boundary, through\n * the versioned environment value encoded here.\n */\n\nimport { Buffer } from 'node:buffer';\n\nimport type { SubagentPolicy } from '../../schemas/subagentPolicy';\nimport { SUBAGENT_CAPABILITY_CEILING_ENV } from '../../types/environment';\n\nexport const SUBAGENT_CAPABILITY_CEILING_VERSION = 2 as const;\nexport { SUBAGENT_CAPABILITY_CEILING_ENV };\n\nconst MAX_TEXT_BYTES = 256;\nconst MAX_TOOL_NAME_BYTES = 128;\nconst MAX_ALLOWED_TOOLS = 256;\nconst MAX_ALLOWED_EXTERNAL_PROFILES = 32;\nconst MAX_EXTERNAL_PROFILE_NAME_BYTES = 128;\nconst EXTERNAL_PROFILE_PATTERN = /^[A-Za-z0-9][A-Za-z0-9/_.:-]+$/u;\nconst TOOL_NAME_PATTERN = /^[A-Za-z0-9_.:-]+$/u;\nconst LAST_C0_CONTROL_CODE = 0x1f;\nconst DELETE_CODE = 0x7f;\n\n/**\n * Ceiling text crosses a process boundary and is rendered in the TUI, so control\n * characters are rejected. Scanning code points avoids a control-character\n * regex, which lints as a hazard even when the escapes are explicit.\n */\nfunction hasControlCharacter(value: string): boolean {\n  for (const character of value) {\n    const code = character.codePointAt(0);\n    if (code !== undefined && (code <= LAST_C0_CONTROL_CODE || code === DELETE_CODE)) return true;\n  }\n  return false;\n}\n\nexport type SubagentCapabilityCeiling = {\n  allowedTools?: readonly string[];\n  requiredTools?: readonly string[];\n  allowMcpTools?: boolean;\n  allowedExternalProfiles?: readonly string[];\n  denyExtensions?: boolean;\n};\n\nexport interface ResolvedSubagentCapabilityCeiling {\n  version: typeof SUBAGENT_CAPABILITY_CEILING_VERSION;\n  allowedTools?: string[];\n  requiredTools?: string[];\n  allowMcpTools?: boolean;\n  allowedExternalProfiles: string[];\n  denyExtensions: boolean;\n  sources: string[];\n}\n\nexport interface SubagentCapabilityAudit {\n  ceiling: ResolvedSubagentCapabilityCeiling;\n  requestedTools?: string[];\n  effectiveTools: string[];\n  removedTools: string[];\n  internalTools: string[];\n  extensionsDenied: boolean;\n  removedExtensionCount: number;\n  requestedMcpToolCount: number;\n  effectiveMcpTools: string[];\n}\n\ninterface TypedPolicyRegistration {\n  generation: string;\n  ceiling: ResolvedSubagentCapabilityCeiling;\n}\n\nexport class SubagentCapabilityPolicyStore {\n  private readonly policies = new Map<string, TypedPolicyRegistration>();\n\n  register(policy: SubagentPolicy, generation: string): void {\n    const ceiling = normalizeCeiling({\n      ...(policy.allowedTools ? { allowedTools: policy.allowedTools } : {}),\n      ...(policy.requiredTools ? { requiredTools: policy.requiredTools } : {}),\n      ...(policy.allowMcpTools === true ? { allowMcpTools: true } : {}),\n      ...(policy.allowedExternalProfiles ? { allowedExternalProfiles: policy.allowedExternalProfiles } : {}),\n      denyExtensions: policy.denyExtensions === true,\n    });\n    ceiling.sources = [policy.owner];\n    this.policies.set(policy.owner, { generation, ceiling });\n  }\n\n  update(policy: SubagentPolicy, generation: string): void {\n    if (this.policies.get(policy.owner)?.generation !== generation) return;\n    this.register(policy, generation);\n  }\n\n  remove(owner: string, generation: string): void {\n    if (this.policies.get(owner)?.generation === generation) this.policies.delete(owner);\n  }\n\n  clear(): void {\n    this.policies.clear();\n  }\n\n  resolve(inherited?: ResolvedSubagentCapabilityCeiling): ResolvedSubagentCapabilityCeiling | undefined {\n    return intersectSubagentCapabilityCeilings(inherited, ...[...this.policies.values()].map(({ ceiling }) => ceiling));\n  }\n}\n\nfunction validateText(value: unknown, field: string): string {\n  if (\n    typeof value !== 'string' ||\n    !value.trim() ||\n    hasControlCharacter(value) ||\n    Buffer.byteLength(value.trim(), 'utf8') > MAX_TEXT_BYTES\n  ) {\n    throw new Error(\n      `Invalid capability ceiling ${field}; expected a non-empty string without control characters (max ${MAX_TEXT_BYTES} UTF-8 bytes).`,\n    );\n  }\n  return value.trim();\n}\n\nfunction normalizeCeiling(ceiling: SubagentCapabilityCeiling): ResolvedSubagentCapabilityCeiling {\n  if (!ceiling || typeof ceiling !== 'object' || Array.isArray(ceiling)) {\n    throw new Error('Invalid capability ceiling; expected an object.');\n  }\n  const hasAllowedTools = Object.hasOwn(ceiling, 'allowedTools');\n  const hasRequiredTools = Object.hasOwn(ceiling, 'requiredTools');\n  const hasAllowMcpTools = Object.hasOwn(ceiling, 'allowMcpTools');\n  const hasAllowedExternalProfiles = Object.hasOwn(ceiling, 'allowedExternalProfiles');\n  const hasDenyExtensions = Object.hasOwn(ceiling, 'denyExtensions');\n  if (!hasAllowedTools && !hasRequiredTools && !hasAllowMcpTools && !hasAllowedExternalProfiles && !hasDenyExtensions) {\n    throw new Error(\n      'Invalid capability ceiling; expected allowedTools, requiredTools, allowMcpTools, allowedExternalProfiles, or denyExtensions.',\n    );\n  }\n  if (hasAllowMcpTools && typeof ceiling.allowMcpTools !== 'boolean') {\n    throw new Error('Invalid capability ceiling allowMcpTools; expected a boolean.');\n  }\n  if (hasDenyExtensions && typeof ceiling.denyExtensions !== 'boolean') {\n    throw new Error('Invalid capability ceiling denyExtensions; expected a boolean.');\n  }\n  const normalizeTools = (value: readonly string[] | undefined, field: 'allowedTools' | 'requiredTools') => {\n    if (!Array.isArray(value)) throw new Error(`Invalid capability ceiling ${field}; expected an array.`);\n    if (value.length > MAX_ALLOWED_TOOLS) {\n      throw new Error(`Invalid capability ceiling ${field}; expected at most ${MAX_ALLOWED_TOOLS} names.`);\n    }\n    return [\n      ...new Set(\n        value.map((tool) => {\n          const name = validateText(tool, `${field} entry`);\n          if (!TOOL_NAME_PATTERN.test(name)) {\n            throw new Error(`Invalid capability ceiling ${field} entry '${name}'.`);\n          }\n          if (Buffer.byteLength(name, 'utf8') > MAX_TOOL_NAME_BYTES) {\n            throw new Error(\n              `Invalid capability ceiling ${field} entry '${name}'; max ${MAX_TOOL_NAME_BYTES} UTF-8 bytes.`,\n            );\n          }\n          return name;\n        }),\n      ),\n    ].sort((left, right) => left.localeCompare(right));\n  };\n  const allowedTools = hasAllowedTools ? normalizeTools(ceiling.allowedTools, 'allowedTools') : undefined;\n  const requiredTools = hasRequiredTools ? normalizeTools(ceiling.requiredTools, 'requiredTools') : undefined;\n  let allowedExternalProfiles: string[] = [];\n  if (Object.hasOwn(ceiling, 'allowedExternalProfiles')) {\n    if (!Array.isArray(ceiling.allowedExternalProfiles)) {\n      throw new Error('Invalid capability ceiling allowedExternalProfiles; expected an array.');\n    }\n    if (ceiling.allowedExternalProfiles.length > MAX_ALLOWED_EXTERNAL_PROFILES) {\n      throw new Error(\n        `Invalid capability ceiling allowedExternalProfiles; expected at most ${MAX_ALLOWED_EXTERNAL_PROFILES} names.`,\n      );\n    }\n    allowedExternalProfiles = [\n      ...new Set(\n        ceiling.allowedExternalProfiles.map((profile) => {\n          const name = validateText(profile, 'allowedExternalProfiles entry');\n          if (\n            !EXTERNAL_PROFILE_PATTERN.test(name) ||\n            Buffer.byteLength(name, 'utf8') > MAX_EXTERNAL_PROFILE_NAME_BYTES\n          ) {\n            throw new Error(`Invalid capability ceiling allowedExternalProfiles entry '${name}'.`);\n          }\n          return name;\n        }),\n      ),\n    ].sort((left, right) => left.localeCompare(right));\n  }\n  return {\n    version: SUBAGENT_CAPABILITY_CEILING_VERSION,\n    ...(allowedTools ? { allowedTools } : {}),\n    ...(requiredTools?.length ? { requiredTools } : {}),\n    ...(ceiling.allowMcpTools === true ? { allowMcpTools: true } : {}),\n    allowedExternalProfiles,\n    denyExtensions: ceiling.denyExtensions === true,\n    sources: [],\n  };\n}\n\nexport function parseSubagentCapabilityCeiling(\n  value: unknown,\n  field = 'capability ceiling',\n): ResolvedSubagentCapabilityCeiling {\n  if (!value || typeof value !== 'object' || Array.isArray(value)) {\n    throw new Error(`Invalid ${field}; expected an object.`);\n  }\n  const record = value as Record<string, unknown>;\n  if (record.version !== SUBAGENT_CAPABILITY_CEILING_VERSION) throw new Error(`Invalid ${field} version.`);\n  const normalized = normalizeCeiling(record as SubagentCapabilityCeiling);\n  const sources = record.sources;\n  if (!Array.isArray(sources) || sources.some((source) => typeof source !== 'string')) {\n    throw new Error(`Invalid ${field} sources; expected an array of strings.`);\n  }\n  normalized.sources = [...new Set(sources.map((source) => validateText(source, `${field} source`)))].sort();\n  return normalized;\n}\n\nexport function intersectSubagentCapabilityCeilings(\n  ...ceilings: Array<ResolvedSubagentCapabilityCeiling | undefined>\n): ResolvedSubagentCapabilityCeiling | undefined {\n  const active = ceilings.filter((ceiling): ceiling is ResolvedSubagentCapabilityCeiling => ceiling !== undefined);\n  if (active.length === 0) return undefined;\n  const definedLists = active\n    .filter((ceiling) => ceiling.allowedTools !== undefined)\n    .map((ceiling) => new Set(ceiling.allowedTools));\n  let allowedTools: string[] | undefined;\n  if (definedLists.length > 0) {\n    allowedTools = [...definedLists[0]!].filter((tool) => definedLists.every((list) => list.has(tool))).sort();\n  }\n  const requiredTools = [...new Set(active.flatMap((ceiling) => ceiling.requiredTools ?? []))]\n    .filter((tool) => !allowedTools || allowedTools.includes(tool))\n    .sort((left, right) => left.localeCompare(right));\n  const profileSets = active.map((ceiling) => new Set(ceiling.allowedExternalProfiles));\n  const allowedExternalProfiles = [...profileSets[0]!]\n    .filter((profile) => profileSets.every((profiles) => profiles.has(profile)))\n    .sort((left, right) => left.localeCompare(right));\n  return {\n    version: SUBAGENT_CAPABILITY_CEILING_VERSION,\n    ...(allowedTools ? { allowedTools } : {}),\n    ...(requiredTools.length ? { requiredTools } : {}),\n    ...(active.every((ceiling) => ceiling.allowMcpTools === true) ? { allowMcpTools: true } : {}),\n    allowedExternalProfiles,\n    denyExtensions: active.some((ceiling) => ceiling.denyExtensions),\n    sources: [...new Set(active.flatMap((ceiling) => ceiling.sources))].sort(),\n  };\n}\n\nexport function encodeSubagentCapabilityCeiling(\n  ceiling: ResolvedSubagentCapabilityCeiling | undefined,\n): string | undefined {\n  if (!ceiling) return undefined;\n  return Buffer.from(JSON.stringify(ceiling), 'utf8').toString('base64url');\n}\n\nexport function decodeSubagentCapabilityCeiling(\n  value: string | undefined,\n): ResolvedSubagentCapabilityCeiling | undefined {\n  if (value === undefined || value === '') return undefined;\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(Buffer.from(value, 'base64url').toString('utf8'));\n  } catch (error) {\n    throw new Error(`Invalid inherited capability ceiling: ${error instanceof Error ? error.message : String(error)}`);\n  }\n  if (\n    !parsed ||\n    typeof parsed !== 'object' ||\n    Array.isArray(parsed) ||\n    (parsed as { version?: unknown }).version !== SUBAGENT_CAPABILITY_CEILING_VERSION\n  ) {\n    throw new Error('Invalid inherited capability ceiling version.');\n  }\n  return parseSubagentCapabilityCeiling(parsed, 'inherited capability ceiling');\n}\n"],"mappings":";;;;;;;;;;AAaA,MAAa,sCAAsC;AAGnD,MAAM,iBAAiB;AACvB,MAAM,sBAAsB;AAC5B,MAAM,oBAAoB;AAC1B,MAAM,gCAAgC;AACtC,MAAM,kCAAkC;AACxC,MAAM,2BAA2B;AACjC,MAAM,oBAAoB;AAC1B,MAAM,uBAAuB;AAC7B,MAAM,cAAc;;;;;;AAOpB,SAAS,oBAAoB,OAAwB;CACnD,KAAK,MAAM,aAAa,OAAO;EAC7B,MAAM,OAAO,UAAU,YAAY,CAAC;EACpC,IAAI,SAAS,KAAA,MAAc,QAAQ,wBAAwB,SAAS,cAAc,OAAO;CAC3F;CACA,OAAO;AACT;AAqCA,IAAa,gCAAb,MAA2C;CACzC,2BAA4B,IAAI,IAAqC;CAErE,SAAS,QAAwB,YAA0B;EACzD,MAAM,UAAU,iBAAiB;GAC/B,GAAI,OAAO,eAAe,EAAE,cAAc,OAAO,aAAa,IAAI,CAAC;GACnE,GAAI,OAAO,gBAAgB,EAAE,eAAe,OAAO,cAAc,IAAI,CAAC;GACtE,GAAI,OAAO,kBAAkB,OAAO,EAAE,eAAe,KAAK,IAAI,CAAC;GAC/D,GAAI,OAAO,0BAA0B,EAAE,yBAAyB,OAAO,wBAAwB,IAAI,CAAC;GACpG,gBAAgB,OAAO,mBAAmB;EAC5C,CAAC;EACD,QAAQ,UAAU,CAAC,OAAO,KAAK;EAC/B,KAAK,SAAS,IAAI,OAAO,OAAO;GAAE;GAAY;EAAQ,CAAC;CACzD;CAEA,OAAO,QAAwB,YAA0B;EACvD,IAAI,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,EAAE,eAAe,YAAY;EAChE,KAAK,SAAS,QAAQ,UAAU;CAClC;CAEA,OAAO,OAAe,YAA0B;EAC9C,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,EAAE,eAAe,YAAY,KAAK,SAAS,OAAO,KAAK;CACrF;CAEA,QAAc;EACZ,KAAK,SAAS,MAAM;CACtB;CAEA,QAAQ,WAA8F;EACpG,OAAO,oCAAoC,WAAW,GAAG,CAAC,GAAG,KAAK,SAAS,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,cAAc,OAAO,CAAC;CACpH;AACF;AAEA,SAAS,aAAa,OAAgB,OAAuB;CAC3D,IACE,OAAO,UAAU,YACjB,CAAC,MAAM,KAAK,KACZ,oBAAoB,KAAK,KACzBA,YAAAA,OAAO,WAAW,MAAM,KAAK,GAAG,MAAM,IAAI,gBAE1C,MAAM,IAAI,MACR,8BAA8B,MAAM,gEAAgE,eAAe,eACrH;CAEF,OAAO,MAAM,KAAK;AACpB;AAEA,SAAS,iBAAiB,SAAuE;CAC/F,IAAI,CAAC,WAAW,OAAO,YAAY,YAAY,MAAM,QAAQ,OAAO,GAClE,MAAM,IAAI,MAAM,iDAAiD;CAEnE,MAAM,kBAAkB,OAAO,OAAO,SAAS,cAAc;CAC7D,MAAM,mBAAmB,OAAO,OAAO,SAAS,eAAe;CAC/D,MAAM,mBAAmB,OAAO,OAAO,SAAS,eAAe;CAC/D,MAAM,6BAA6B,OAAO,OAAO,SAAS,yBAAyB;CACnF,MAAM,oBAAoB,OAAO,OAAO,SAAS,gBAAgB;CACjE,IAAI,CAAC,mBAAmB,CAAC,oBAAoB,CAAC,oBAAoB,CAAC,8BAA8B,CAAC,mBAChG,MAAM,IAAI,MACR,8HACF;CAEF,IAAI,oBAAoB,OAAO,QAAQ,kBAAkB,WACvD,MAAM,IAAI,MAAM,+DAA+D;CAEjF,IAAI,qBAAqB,OAAO,QAAQ,mBAAmB,WACzD,MAAM,IAAI,MAAM,gEAAgE;CAElF,MAAM,kBAAkB,OAAsC,UAA4C;EACxG,IAAI,CAAC,MAAM,QAAQ,KAAK,GAAG,MAAM,IAAI,MAAM,8BAA8B,MAAM,qBAAqB;EACpG,IAAI,MAAM,SAAS,mBACjB,MAAM,IAAI,MAAM,8BAA8B,MAAM,qBAAqB,kBAAkB,QAAQ;EAErG,OAAO,CACL,GAAG,IAAI,IACL,MAAM,KAAK,SAAS;GAClB,MAAM,OAAO,aAAa,MAAM,GAAG,MAAM,OAAO;GAChD,IAAI,CAAC,kBAAkB,KAAK,IAAI,GAC9B,MAAM,IAAI,MAAM,8BAA8B,MAAM,UAAU,KAAK,GAAG;GAExE,IAAIA,YAAAA,OAAO,WAAW,MAAM,MAAM,IAAI,qBACpC,MAAM,IAAI,MACR,8BAA8B,MAAM,UAAU,KAAK,SAAS,oBAAoB,cAClF;GAEF,OAAO;EACT,CAAC,CACH,CACF,CAAC,CAAC,MAAM,MAAM,UAAU,KAAK,cAAc,KAAK,CAAC;CACnD;CACA,MAAM,eAAe,kBAAkB,eAAe,QAAQ,cAAc,cAAc,IAAI,KAAA;CAC9F,MAAM,gBAAgB,mBAAmB,eAAe,QAAQ,eAAe,eAAe,IAAI,KAAA;CAClG,IAAI,0BAAoC,CAAC;CACzC,IAAI,OAAO,OAAO,SAAS,yBAAyB,GAAG;EACrD,IAAI,CAAC,MAAM,QAAQ,QAAQ,uBAAuB,GAChD,MAAM,IAAI,MAAM,wEAAwE;EAE1F,IAAI,QAAQ,wBAAwB,SAAS,+BAC3C,MAAM,IAAI,MACR,wEAAwE,8BAA8B,QACxG;EAEF,0BAA0B,CACxB,GAAG,IAAI,IACL,QAAQ,wBAAwB,KAAK,YAAY;GAC/C,MAAM,OAAO,aAAa,SAAS,+BAA+B;GAClE,IACE,CAAC,yBAAyB,KAAK,IAAI,KACnCA,YAAAA,OAAO,WAAW,MAAM,MAAM,IAAI,iCAElC,MAAM,IAAI,MAAM,6DAA6D,KAAK,GAAG;GAEvF,OAAO;EACT,CAAC,CACH,CACF,CAAC,CAAC,MAAM,MAAM,UAAU,KAAK,cAAc,KAAK,CAAC;CACnD;CACA,OAAO;EACL,SAAA;EACA,GAAI,eAAe,EAAE,aAAa,IAAI,CAAC;EACvC,GAAI,eAAe,SAAS,EAAE,cAAc,IAAI,CAAC;EACjD,GAAI,QAAQ,kBAAkB,OAAO,EAAE,eAAe,KAAK,IAAI,CAAC;EAChE;EACA,gBAAgB,QAAQ,mBAAmB;EAC3C,SAAS,CAAC;CACZ;AACF;AAEA,SAAgB,+BACd,OACA,QAAQ,sBAC2B;CACnC,IAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GAC5D,MAAM,IAAI,MAAM,WAAW,MAAM,sBAAsB;CAEzD,MAAM,SAAS;CACf,IAAI,OAAO,YAAA,GAAiD,MAAM,IAAI,MAAM,WAAW,MAAM,UAAU;CACvG,MAAM,aAAa,iBAAiB,MAAmC;CACvE,MAAM,UAAU,OAAO;CACvB,IAAI,CAAC,MAAM,QAAQ,OAAO,KAAK,QAAQ,MAAM,WAAW,OAAO,WAAW,QAAQ,GAChF,MAAM,IAAI,MAAM,WAAW,MAAM,wCAAwC;CAE3E,WAAW,UAAU,CAAC,GAAG,IAAI,IAAI,QAAQ,KAAK,WAAW,aAAa,QAAQ,GAAG,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK;CACzG,OAAO;AACT;AAEA,SAAgB,oCACd,GAAG,UAC4C;CAC/C,MAAM,SAAS,SAAS,QAAQ,YAA0D,YAAY,KAAA,CAAS;CAC/G,IAAI,OAAO,WAAW,GAAG,OAAO,KAAA;CAChC,MAAM,eAAe,OAClB,QAAQ,YAAY,QAAQ,iBAAiB,KAAA,CAAS,CAAC,CACvD,KAAK,YAAY,IAAI,IAAI,QAAQ,YAAY,CAAC;CACjD,IAAI;CACJ,IAAI,aAAa,SAAS,GACxB,eAAe,CAAC,GAAG,aAAa,EAAG,CAAC,CAAC,QAAQ,SAAS,aAAa,OAAO,SAAS,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK;CAE3G,MAAM,gBAAgB,CAAC,GAAG,IAAI,IAAI,OAAO,SAAS,YAAY,QAAQ,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CACzF,QAAQ,SAAS,CAAC,gBAAgB,aAAa,SAAS,IAAI,CAAC,CAAC,CAC9D,MAAM,MAAM,UAAU,KAAK,cAAc,KAAK,CAAC;CAClD,MAAM,cAAc,OAAO,KAAK,YAAY,IAAI,IAAI,QAAQ,uBAAuB,CAAC;CACpF,MAAM,0BAA0B,CAAC,GAAG,YAAY,EAAG,CAAC,CACjD,QAAQ,YAAY,YAAY,OAAO,aAAa,SAAS,IAAI,OAAO,CAAC,CAAC,CAAC,CAC3E,MAAM,MAAM,UAAU,KAAK,cAAc,KAAK,CAAC;CAClD,OAAO;EACL,SAAA;EACA,GAAI,eAAe,EAAE,aAAa,IAAI,CAAC;EACvC,GAAI,cAAc,SAAS,EAAE,cAAc,IAAI,CAAC;EAChD,GAAI,OAAO,OAAO,YAAY,QAAQ,kBAAkB,IAAI,IAAI,EAAE,eAAe,KAAK,IAAI,CAAC;EAC3F;EACA,gBAAgB,OAAO,MAAM,YAAY,QAAQ,cAAc;EAC/D,SAAS,CAAC,GAAG,IAAI,IAAI,OAAO,SAAS,YAAY,QAAQ,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK;CAC3E;AACF;AAEA,SAAgB,gCACd,SACoB;CACpB,IAAI,CAAC,SAAS,OAAO,KAAA;CACrB,OAAOA,YAAAA,OAAO,KAAK,KAAK,UAAU,OAAO,GAAG,MAAM,CAAC,CAAC,SAAS,WAAW;AAC1E;AAEA,SAAgB,gCACd,OAC+C;CAC/C,IAAI,UAAU,KAAA,KAAa,UAAU,IAAI,OAAO,KAAA;CAChD,IAAI;CACJ,IAAI;EACF,SAAS,KAAK,MAAMA,YAAAA,OAAO,KAAK,OAAO,WAAW,CAAC,CAAC,SAAS,MAAM,CAAC;CACtE,SAAS,OAAO;EACd,MAAM,IAAI,MAAM,yCAAyC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAAG;CACnH;CACA,IACE,CAAC,UACD,OAAO,WAAW,YAClB,MAAM,QAAQ,MAAM,KACnB,OAAiC,YAAA,GAElC,MAAM,IAAI,MAAM,+CAA+C;CAEjE,OAAO,+BAA+B,QAAQ,8BAA8B;AAC9E"}

package/dist/capabilityCeiling-CF7kAS18.mjs

@@ -0,0 +1,156 @@
+import "./environment-DrqhrxG_.mjs";
+import { Buffer } from "node:buffer";
+//#region src/schemas/team/capabilityCeiling.ts
+/**
+* Capability-ceiling values, intersection, and the child-process codec.
+*
+* Live extension contributions enter through Team's `doom/subagent-policy`
+* Cordis service. Only the resolved ceiling crosses a process boundary, through
+* the versioned environment value encoded here.
+*/
+const SUBAGENT_CAPABILITY_CEILING_VERSION = 2;
+const MAX_TEXT_BYTES = 256;
+const MAX_TOOL_NAME_BYTES = 128;
+const MAX_ALLOWED_TOOLS = 256;
+const MAX_ALLOWED_EXTERNAL_PROFILES = 32;
+const MAX_EXTERNAL_PROFILE_NAME_BYTES = 128;
+const EXTERNAL_PROFILE_PATTERN = /^[A-Za-z0-9][A-Za-z0-9/_.:-]+$/u;
+const TOOL_NAME_PATTERN = /^[A-Za-z0-9_.:-]+$/u;
+const LAST_C0_CONTROL_CODE = 31;
+const DELETE_CODE = 127;
+/**
+* Ceiling text crosses a process boundary and is rendered in the TUI, so control
+* characters are rejected. Scanning code points avoids a control-character
+* regex, which lints as a hazard even when the escapes are explicit.
+*/
+function hasControlCharacter(value) {
+	for (const character of value) {
+		const code = character.codePointAt(0);
+		if (code !== void 0 && (code <= LAST_C0_CONTROL_CODE || code === DELETE_CODE)) return true;
+	}
+	return false;
+}
+var SubagentCapabilityPolicyStore = class {
+	policies = /* @__PURE__ */ new Map();
+	register(policy, generation) {
+		const ceiling = normalizeCeiling({
+			...policy.allowedTools ? { allowedTools: policy.allowedTools } : {},
+			...policy.requiredTools ? { requiredTools: policy.requiredTools } : {},
+			...policy.allowMcpTools === true ? { allowMcpTools: true } : {},
+			...policy.allowedExternalProfiles ? { allowedExternalProfiles: policy.allowedExternalProfiles } : {},
+			denyExtensions: policy.denyExtensions === true
+		});
+		ceiling.sources = [policy.owner];
+		this.policies.set(policy.owner, {
+			generation,
+			ceiling
+		});
+	}
+	update(policy, generation) {
+		if (this.policies.get(policy.owner)?.generation !== generation) return;
+		this.register(policy, generation);
+	}
+	remove(owner, generation) {
+		if (this.policies.get(owner)?.generation === generation) this.policies.delete(owner);
+	}
+	clear() {
+		this.policies.clear();
+	}
+	resolve(inherited) {
+		return intersectSubagentCapabilityCeilings(inherited, ...[...this.policies.values()].map(({ ceiling }) => ceiling));
+	}
+};
+function validateText(value, field) {
+	if (typeof value !== "string" || !value.trim() || hasControlCharacter(value) || Buffer.byteLength(value.trim(), "utf8") > MAX_TEXT_BYTES) throw new Error(`Invalid capability ceiling ${field}; expected a non-empty string without control characters (max ${MAX_TEXT_BYTES} UTF-8 bytes).`);
+	return value.trim();
+}
+function normalizeCeiling(ceiling) {
+	if (!ceiling || typeof ceiling !== "object" || Array.isArray(ceiling)) throw new Error("Invalid capability ceiling; expected an object.");
+	const hasAllowedTools = Object.hasOwn(ceiling, "allowedTools");
+	const hasRequiredTools = Object.hasOwn(ceiling, "requiredTools");
+	const hasAllowMcpTools = Object.hasOwn(ceiling, "allowMcpTools");
+	const hasAllowedExternalProfiles = Object.hasOwn(ceiling, "allowedExternalProfiles");
+	const hasDenyExtensions = Object.hasOwn(ceiling, "denyExtensions");
+	if (!hasAllowedTools && !hasRequiredTools && !hasAllowMcpTools && !hasAllowedExternalProfiles && !hasDenyExtensions) throw new Error("Invalid capability ceiling; expected allowedTools, requiredTools, allowMcpTools, allowedExternalProfiles, or denyExtensions.");
+	if (hasAllowMcpTools && typeof ceiling.allowMcpTools !== "boolean") throw new Error("Invalid capability ceiling allowMcpTools; expected a boolean.");
+	if (hasDenyExtensions && typeof ceiling.denyExtensions !== "boolean") throw new Error("Invalid capability ceiling denyExtensions; expected a boolean.");
+	const normalizeTools = (value, field) => {
+		if (!Array.isArray(value)) throw new Error(`Invalid capability ceiling ${field}; expected an array.`);
+		if (value.length > MAX_ALLOWED_TOOLS) throw new Error(`Invalid capability ceiling ${field}; expected at most ${MAX_ALLOWED_TOOLS} names.`);
+		return [...new Set(value.map((tool) => {
+			const name = validateText(tool, `${field} entry`);
+			if (!TOOL_NAME_PATTERN.test(name)) throw new Error(`Invalid capability ceiling ${field} entry '${name}'.`);
+			if (Buffer.byteLength(name, "utf8") > MAX_TOOL_NAME_BYTES) throw new Error(`Invalid capability ceiling ${field} entry '${name}'; max ${MAX_TOOL_NAME_BYTES} UTF-8 bytes.`);
+			return name;
+		}))].sort((left, right) => left.localeCompare(right));
+	};
+	const allowedTools = hasAllowedTools ? normalizeTools(ceiling.allowedTools, "allowedTools") : void 0;
+	const requiredTools = hasRequiredTools ? normalizeTools(ceiling.requiredTools, "requiredTools") : void 0;
+	let allowedExternalProfiles = [];
+	if (Object.hasOwn(ceiling, "allowedExternalProfiles")) {
+		if (!Array.isArray(ceiling.allowedExternalProfiles)) throw new Error("Invalid capability ceiling allowedExternalProfiles; expected an array.");
+		if (ceiling.allowedExternalProfiles.length > MAX_ALLOWED_EXTERNAL_PROFILES) throw new Error(`Invalid capability ceiling allowedExternalProfiles; expected at most ${MAX_ALLOWED_EXTERNAL_PROFILES} names.`);
+		allowedExternalProfiles = [...new Set(ceiling.allowedExternalProfiles.map((profile) => {
+			const name = validateText(profile, "allowedExternalProfiles entry");
+			if (!EXTERNAL_PROFILE_PATTERN.test(name) || Buffer.byteLength(name, "utf8") > MAX_EXTERNAL_PROFILE_NAME_BYTES) throw new Error(`Invalid capability ceiling allowedExternalProfiles entry '${name}'.`);
+			return name;
+		}))].sort((left, right) => left.localeCompare(right));
+	}
+	return {
+		version: 2,
+		...allowedTools ? { allowedTools } : {},
+		...requiredTools?.length ? { requiredTools } : {},
+		...ceiling.allowMcpTools === true ? { allowMcpTools: true } : {},
+		allowedExternalProfiles,
+		denyExtensions: ceiling.denyExtensions === true,
+		sources: []
+	};
+}
+function parseSubagentCapabilityCeiling(value, field = "capability ceiling") {
+	if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error(`Invalid ${field}; expected an object.`);
+	const record = value;
+	if (record.version !== 2) throw new Error(`Invalid ${field} version.`);
+	const normalized = normalizeCeiling(record);
+	const sources = record.sources;
+	if (!Array.isArray(sources) || sources.some((source) => typeof source !== "string")) throw new Error(`Invalid ${field} sources; expected an array of strings.`);
+	normalized.sources = [...new Set(sources.map((source) => validateText(source, `${field} source`)))].sort();
+	return normalized;
+}
+function intersectSubagentCapabilityCeilings(...ceilings) {
+	const active = ceilings.filter((ceiling) => ceiling !== void 0);
+	if (active.length === 0) return void 0;
+	const definedLists = active.filter((ceiling) => ceiling.allowedTools !== void 0).map((ceiling) => new Set(ceiling.allowedTools));
+	let allowedTools;
+	if (definedLists.length > 0) allowedTools = [...definedLists[0]].filter((tool) => definedLists.every((list) => list.has(tool))).sort();
+	const requiredTools = [...new Set(active.flatMap((ceiling) => ceiling.requiredTools ?? []))].filter((tool) => !allowedTools || allowedTools.includes(tool)).sort((left, right) => left.localeCompare(right));
+	const profileSets = active.map((ceiling) => new Set(ceiling.allowedExternalProfiles));
+	const allowedExternalProfiles = [...profileSets[0]].filter((profile) => profileSets.every((profiles) => profiles.has(profile))).sort((left, right) => left.localeCompare(right));
+	return {
+		version: 2,
+		...allowedTools ? { allowedTools } : {},
+		...requiredTools.length ? { requiredTools } : {},
+		...active.every((ceiling) => ceiling.allowMcpTools === true) ? { allowMcpTools: true } : {},
+		allowedExternalProfiles,
+		denyExtensions: active.some((ceiling) => ceiling.denyExtensions),
+		sources: [...new Set(active.flatMap((ceiling) => ceiling.sources))].sort()
+	};
+}
+function encodeSubagentCapabilityCeiling(ceiling) {
+	if (!ceiling) return void 0;
+	return Buffer.from(JSON.stringify(ceiling), "utf8").toString("base64url");
+}
+function decodeSubagentCapabilityCeiling(value) {
+	if (value === void 0 || value === "") return void 0;
+	let parsed;
+	try {
+		parsed = JSON.parse(Buffer.from(value, "base64url").toString("utf8"));
+	} catch (error) {
+		throw new Error(`Invalid inherited capability ceiling: ${error instanceof Error ? error.message : String(error)}`);
+	}
+	if (!parsed || typeof parsed !== "object" || Array.isArray(parsed) || parsed.version !== 2) throw new Error("Invalid inherited capability ceiling version.");
+	return parseSubagentCapabilityCeiling(parsed, "inherited capability ceiling");
+}
+//#endregion
+export { intersectSubagentCapabilityCeilings as a, encodeSubagentCapabilityCeiling as i, SubagentCapabilityPolicyStore as n, parseSubagentCapabilityCeiling as o, decodeSubagentCapabilityCeiling as r, SUBAGENT_CAPABILITY_CEILING_VERSION as t };
+
+//# sourceMappingURL=capabilityCeiling-CF7kAS18.mjs.map

package/dist/capabilityCeiling-CF7kAS18.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilityCeiling-CF7kAS18.mjs","names":[],"sources":["../src/schemas/team/capabilityCeiling.ts"],"sourcesContent":["/**\n * Capability-ceiling values, intersection, and the child-process codec.\n *\n * Live extension contributions enter through Team's `doom/subagent-policy`\n * Cordis service. Only the resolved ceiling crosses a process boundary, through\n * the versioned environment value encoded here.\n */\n\nimport { Buffer } from 'node:buffer';\n\nimport type { SubagentPolicy } from '../../schemas/subagentPolicy';\nimport { SUBAGENT_CAPABILITY_CEILING_ENV } from '../../types/environment';\n\nexport const SUBAGENT_CAPABILITY_CEILING_VERSION = 2 as const;\nexport { SUBAGENT_CAPABILITY_CEILING_ENV };\n\nconst MAX_TEXT_BYTES = 256;\nconst MAX_TOOL_NAME_BYTES = 128;\nconst MAX_ALLOWED_TOOLS = 256;\nconst MAX_ALLOWED_EXTERNAL_PROFILES = 32;\nconst MAX_EXTERNAL_PROFILE_NAME_BYTES = 128;\nconst EXTERNAL_PROFILE_PATTERN = /^[A-Za-z0-9][A-Za-z0-9/_.:-]+$/u;\nconst TOOL_NAME_PATTERN = /^[A-Za-z0-9_.:-]+$/u;\nconst LAST_C0_CONTROL_CODE = 0x1f;\nconst DELETE_CODE = 0x7f;\n\n/**\n * Ceiling text crosses a process boundary and is rendered in the TUI, so control\n * characters are rejected. Scanning code points avoids a control-character\n * regex, which lints as a hazard even when the escapes are explicit.\n */\nfunction hasControlCharacter(value: string): boolean {\n  for (const character of value) {\n    const code = character.codePointAt(0);\n    if (code !== undefined && (code <= LAST_C0_CONTROL_CODE || code === DELETE_CODE)) return true;\n  }\n  return false;\n}\n\nexport type SubagentCapabilityCeiling = {\n  allowedTools?: readonly string[];\n  requiredTools?: readonly string[];\n  allowMcpTools?: boolean;\n  allowedExternalProfiles?: readonly string[];\n  denyExtensions?: boolean;\n};\n\nexport interface ResolvedSubagentCapabilityCeiling {\n  version: typeof SUBAGENT_CAPABILITY_CEILING_VERSION;\n  allowedTools?: string[];\n  requiredTools?: string[];\n  allowMcpTools?: boolean;\n  allowedExternalProfiles: string[];\n  denyExtensions: boolean;\n  sources: string[];\n}\n\nexport interface SubagentCapabilityAudit {\n  ceiling: ResolvedSubagentCapabilityCeiling;\n  requestedTools?: string[];\n  effectiveTools: string[];\n  removedTools: string[];\n  internalTools: string[];\n  extensionsDenied: boolean;\n  removedExtensionCount: number;\n  requestedMcpToolCount: number;\n  effectiveMcpTools: string[];\n}\n\ninterface TypedPolicyRegistration {\n  generation: string;\n  ceiling: ResolvedSubagentCapabilityCeiling;\n}\n\nexport class SubagentCapabilityPolicyStore {\n  private readonly policies = new Map<string, TypedPolicyRegistration>();\n\n  register(policy: SubagentPolicy, generation: string): void {\n    const ceiling = normalizeCeiling({\n      ...(policy.allowedTools ? { allowedTools: policy.allowedTools } : {}),\n      ...(policy.requiredTools ? { requiredTools: policy.requiredTools } : {}),\n      ...(policy.allowMcpTools === true ? { allowMcpTools: true } : {}),\n      ...(policy.allowedExternalProfiles ? { allowedExternalProfiles: policy.allowedExternalProfiles } : {}),\n      denyExtensions: policy.denyExtensions === true,\n    });\n    ceiling.sources = [policy.owner];\n    this.policies.set(policy.owner, { generation, ceiling });\n  }\n\n  update(policy: SubagentPolicy, generation: string): void {\n    if (this.policies.get(policy.owner)?.generation !== generation) return;\n    this.register(policy, generation);\n  }\n\n  remove(owner: string, generation: string): void {\n    if (this.policies.get(owner)?.generation === generation) this.policies.delete(owner);\n  }\n\n  clear(): void {\n    this.policies.clear();\n  }\n\n  resolve(inherited?: ResolvedSubagentCapabilityCeiling): ResolvedSubagentCapabilityCeiling | undefined {\n    return intersectSubagentCapabilityCeilings(inherited, ...[...this.policies.values()].map(({ ceiling }) => ceiling));\n  }\n}\n\nfunction validateText(value: unknown, field: string): string {\n  if (\n    typeof value !== 'string' ||\n    !value.trim() ||\n    hasControlCharacter(value) ||\n    Buffer.byteLength(value.trim(), 'utf8') > MAX_TEXT_BYTES\n  ) {\n    throw new Error(\n      `Invalid capability ceiling ${field}; expected a non-empty string without control characters (max ${MAX_TEXT_BYTES} UTF-8 bytes).`,\n    );\n  }\n  return value.trim();\n}\n\nfunction normalizeCeiling(ceiling: SubagentCapabilityCeiling): ResolvedSubagentCapabilityCeiling {\n  if (!ceiling || typeof ceiling !== 'object' || Array.isArray(ceiling)) {\n    throw new Error('Invalid capability ceiling; expected an object.');\n  }\n  const hasAllowedTools = Object.hasOwn(ceiling, 'allowedTools');\n  const hasRequiredTools = Object.hasOwn(ceiling, 'requiredTools');\n  const hasAllowMcpTools = Object.hasOwn(ceiling, 'allowMcpTools');\n  const hasAllowedExternalProfiles = Object.hasOwn(ceiling, 'allowedExternalProfiles');\n  const hasDenyExtensions = Object.hasOwn(ceiling, 'denyExtensions');\n  if (!hasAllowedTools && !hasRequiredTools && !hasAllowMcpTools && !hasAllowedExternalProfiles && !hasDenyExtensions) {\n    throw new Error(\n      'Invalid capability ceiling; expected allowedTools, requiredTools, allowMcpTools, allowedExternalProfiles, or denyExtensions.',\n    );\n  }\n  if (hasAllowMcpTools && typeof ceiling.allowMcpTools !== 'boolean') {\n    throw new Error('Invalid capability ceiling allowMcpTools; expected a boolean.');\n  }\n  if (hasDenyExtensions && typeof ceiling.denyExtensions !== 'boolean') {\n    throw new Error('Invalid capability ceiling denyExtensions; expected a boolean.');\n  }\n  const normalizeTools = (value: readonly string[] | undefined, field: 'allowedTools' | 'requiredTools') => {\n    if (!Array.isArray(value)) throw new Error(`Invalid capability ceiling ${field}; expected an array.`);\n    if (value.length > MAX_ALLOWED_TOOLS) {\n      throw new Error(`Invalid capability ceiling ${field}; expected at most ${MAX_ALLOWED_TOOLS} names.`);\n    }\n    return [\n      ...new Set(\n        value.map((tool) => {\n          const name = validateText(tool, `${field} entry`);\n          if (!TOOL_NAME_PATTERN.test(name)) {\n            throw new Error(`Invalid capability ceiling ${field} entry '${name}'.`);\n          }\n          if (Buffer.byteLength(name, 'utf8') > MAX_TOOL_NAME_BYTES) {\n            throw new Error(\n              `Invalid capability ceiling ${field} entry '${name}'; max ${MAX_TOOL_NAME_BYTES} UTF-8 bytes.`,\n            );\n          }\n          return name;\n        }),\n      ),\n    ].sort((left, right) => left.localeCompare(right));\n  };\n  const allowedTools = hasAllowedTools ? normalizeTools(ceiling.allowedTools, 'allowedTools') : undefined;\n  const requiredTools = hasRequiredTools ? normalizeTools(ceiling.requiredTools, 'requiredTools') : undefined;\n  let allowedExternalProfiles: string[] = [];\n  if (Object.hasOwn(ceiling, 'allowedExternalProfiles')) {\n    if (!Array.isArray(ceiling.allowedExternalProfiles)) {\n      throw new Error('Invalid capability ceiling allowedExternalProfiles; expected an array.');\n    }\n    if (ceiling.allowedExternalProfiles.length > MAX_ALLOWED_EXTERNAL_PROFILES) {\n      throw new Error(\n        `Invalid capability ceiling allowedExternalProfiles; expected at most ${MAX_ALLOWED_EXTERNAL_PROFILES} names.`,\n      );\n    }\n    allowedExternalProfiles = [\n      ...new Set(\n        ceiling.allowedExternalProfiles.map((profile) => {\n          const name = validateText(profile, 'allowedExternalProfiles entry');\n          if (\n            !EXTERNAL_PROFILE_PATTERN.test(name) ||\n            Buffer.byteLength(name, 'utf8') > MAX_EXTERNAL_PROFILE_NAME_BYTES\n          ) {\n            throw new Error(`Invalid capability ceiling allowedExternalProfiles entry '${name}'.`);\n          }\n          return name;\n        }),\n      ),\n    ].sort((left, right) => left.localeCompare(right));\n  }\n  return {\n    version: SUBAGENT_CAPABILITY_CEILING_VERSION,\n    ...(allowedTools ? { allowedTools } : {}),\n    ...(requiredTools?.length ? { requiredTools } : {}),\n    ...(ceiling.allowMcpTools === true ? { allowMcpTools: true } : {}),\n    allowedExternalProfiles,\n    denyExtensions: ceiling.denyExtensions === true,\n    sources: [],\n  };\n}\n\nexport function parseSubagentCapabilityCeiling(\n  value: unknown,\n  field = 'capability ceiling',\n): ResolvedSubagentCapabilityCeiling {\n  if (!value || typeof value !== 'object' || Array.isArray(value)) {\n    throw new Error(`Invalid ${field}; expected an object.`);\n  }\n  const record = value as Record<string, unknown>;\n  if (record.version !== SUBAGENT_CAPABILITY_CEILING_VERSION) throw new Error(`Invalid ${field} version.`);\n  const normalized = normalizeCeiling(record as SubagentCapabilityCeiling);\n  const sources = record.sources;\n  if (!Array.isArray(sources) || sources.some((source) => typeof source !== 'string')) {\n    throw new Error(`Invalid ${field} sources; expected an array of strings.`);\n  }\n  normalized.sources = [...new Set(sources.map((source) => validateText(source, `${field} source`)))].sort();\n  return normalized;\n}\n\nexport function intersectSubagentCapabilityCeilings(\n  ...ceilings: Array<ResolvedSubagentCapabilityCeiling | undefined>\n): ResolvedSubagentCapabilityCeiling | undefined {\n  const active = ceilings.filter((ceiling): ceiling is ResolvedSubagentCapabilityCeiling => ceiling !== undefined);\n  if (active.length === 0) return undefined;\n  const definedLists = active\n    .filter((ceiling) => ceiling.allowedTools !== undefined)\n    .map((ceiling) => new Set(ceiling.allowedTools));\n  let allowedTools: string[] | undefined;\n  if (definedLists.length > 0) {\n    allowedTools = [...definedLists[0]!].filter((tool) => definedLists.every((list) => list.has(tool))).sort();\n  }\n  const requiredTools = [...new Set(active.flatMap((ceiling) => ceiling.requiredTools ?? []))]\n    .filter((tool) => !allowedTools || allowedTools.includes(tool))\n    .sort((left, right) => left.localeCompare(right));\n  const profileSets = active.map((ceiling) => new Set(ceiling.allowedExternalProfiles));\n  const allowedExternalProfiles = [...profileSets[0]!]\n    .filter((profile) => profileSets.every((profiles) => profiles.has(profile)))\n    .sort((left, right) => left.localeCompare(right));\n  return {\n    version: SUBAGENT_CAPABILITY_CEILING_VERSION,\n    ...(allowedTools ? { allowedTools } : {}),\n    ...(requiredTools.length ? { requiredTools } : {}),\n    ...(active.every((ceiling) => ceiling.allowMcpTools === true) ? { allowMcpTools: true } : {}),\n    allowedExternalProfiles,\n    denyExtensions: active.some((ceiling) => ceiling.denyExtensions),\n    sources: [...new Set(active.flatMap((ceiling) => ceiling.sources))].sort(),\n  };\n}\n\nexport function encodeSubagentCapabilityCeiling(\n  ceiling: ResolvedSubagentCapabilityCeiling | undefined,\n): string | undefined {\n  if (!ceiling) return undefined;\n  return Buffer.from(JSON.stringify(ceiling), 'utf8').toString('base64url');\n}\n\nexport function decodeSubagentCapabilityCeiling(\n  value: string | undefined,\n): ResolvedSubagentCapabilityCeiling | undefined {\n  if (value === undefined || value === '') return undefined;\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(Buffer.from(value, 'base64url').toString('utf8'));\n  } catch (error) {\n    throw new Error(`Invalid inherited capability ceiling: ${error instanceof Error ? error.message : String(error)}`);\n  }\n  if (\n    !parsed ||\n    typeof parsed !== 'object' ||\n    Array.isArray(parsed) ||\n    (parsed as { version?: unknown }).version !== SUBAGENT_CAPABILITY_CEILING_VERSION\n  ) {\n    throw new Error('Invalid inherited capability ceiling version.');\n  }\n  return parseSubagentCapabilityCeiling(parsed, 'inherited capability ceiling');\n}\n"],"mappings":";;;;;;;;;;AAaA,MAAa,sCAAsC;AAGnD,MAAM,iBAAiB;AACvB,MAAM,sBAAsB;AAC5B,MAAM,oBAAoB;AAC1B,MAAM,gCAAgC;AACtC,MAAM,kCAAkC;AACxC,MAAM,2BAA2B;AACjC,MAAM,oBAAoB;AAC1B,MAAM,uBAAuB;AAC7B,MAAM,cAAc;;;;;;AAOpB,SAAS,oBAAoB,OAAwB;CACnD,KAAK,MAAM,aAAa,OAAO;EAC7B,MAAM,OAAO,UAAU,YAAY,CAAC;EACpC,IAAI,SAAS,KAAA,MAAc,QAAQ,wBAAwB,SAAS,cAAc,OAAO;CAC3F;CACA,OAAO;AACT;AAqCA,IAAa,gCAAb,MAA2C;CACzC,2BAA4B,IAAI,IAAqC;CAErE,SAAS,QAAwB,YAA0B;EACzD,MAAM,UAAU,iBAAiB;GAC/B,GAAI,OAAO,eAAe,EAAE,cAAc,OAAO,aAAa,IAAI,CAAC;GACnE,GAAI,OAAO,gBAAgB,EAAE,eAAe,OAAO,cAAc,IAAI,CAAC;GACtE,GAAI,OAAO,kBAAkB,OAAO,EAAE,eAAe,KAAK,IAAI,CAAC;GAC/D,GAAI,OAAO,0BAA0B,EAAE,yBAAyB,OAAO,wBAAwB,IAAI,CAAC;GACpG,gBAAgB,OAAO,mBAAmB;EAC5C,CAAC;EACD,QAAQ,UAAU,CAAC,OAAO,KAAK;EAC/B,KAAK,SAAS,IAAI,OAAO,OAAO;GAAE;GAAY;EAAQ,CAAC;CACzD;CAEA,OAAO,QAAwB,YAA0B;EACvD,IAAI,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,EAAE,eAAe,YAAY;EAChE,KAAK,SAAS,QAAQ,UAAU;CAClC;CAEA,OAAO,OAAe,YAA0B;EAC9C,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,EAAE,eAAe,YAAY,KAAK,SAAS,OAAO,KAAK;CACrF;CAEA,QAAc;EACZ,KAAK,SAAS,MAAM;CACtB;CAEA,QAAQ,WAA8F;EACpG,OAAO,oCAAoC,WAAW,GAAG,CAAC,GAAG,KAAK,SAAS,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,cAAc,OAAO,CAAC;CACpH;AACF;AAEA,SAAS,aAAa,OAAgB,OAAuB;CAC3D,IACE,OAAO,UAAU,YACjB,CAAC,MAAM,KAAK,KACZ,oBAAoB,KAAK,KACzB,OAAO,WAAW,MAAM,KAAK,GAAG,MAAM,IAAI,gBAE1C,MAAM,IAAI,MACR,8BAA8B,MAAM,gEAAgE,eAAe,eACrH;CAEF,OAAO,MAAM,KAAK;AACpB;AAEA,SAAS,iBAAiB,SAAuE;CAC/F,IAAI,CAAC,WAAW,OAAO,YAAY,YAAY,MAAM,QAAQ,OAAO,GAClE,MAAM,IAAI,MAAM,iDAAiD;CAEnE,MAAM,kBAAkB,OAAO,OAAO,SAAS,cAAc;CAC7D,MAAM,mBAAmB,OAAO,OAAO,SAAS,eAAe;CAC/D,MAAM,mBAAmB,OAAO,OAAO,SAAS,eAAe;CAC/D,MAAM,6BAA6B,OAAO,OAAO,SAAS,yBAAyB;CACnF,MAAM,oBAAoB,OAAO,OAAO,SAAS,gBAAgB;CACjE,IAAI,CAAC,mBAAmB,CAAC,oBAAoB,CAAC,oBAAoB,CAAC,8BAA8B,CAAC,mBAChG,MAAM,IAAI,MACR,8HACF;CAEF,IAAI,oBAAoB,OAAO,QAAQ,kBAAkB,WACvD,MAAM,IAAI,MAAM,+DAA+D;CAEjF,IAAI,qBAAqB,OAAO,QAAQ,mBAAmB,WACzD,MAAM,IAAI,MAAM,gEAAgE;CAElF,MAAM,kBAAkB,OAAsC,UAA4C;EACxG,IAAI,CAAC,MAAM,QAAQ,KAAK,GAAG,MAAM,IAAI,MAAM,8BAA8B,MAAM,qBAAqB;EACpG,IAAI,MAAM,SAAS,mBACjB,MAAM,IAAI,MAAM,8BAA8B,MAAM,qBAAqB,kBAAkB,QAAQ;EAErG,OAAO,CACL,GAAG,IAAI,IACL,MAAM,KAAK,SAAS;GAClB,MAAM,OAAO,aAAa,MAAM,GAAG,MAAM,OAAO;GAChD,IAAI,CAAC,kBAAkB,KAAK,IAAI,GAC9B,MAAM,IAAI,MAAM,8BAA8B,MAAM,UAAU,KAAK,GAAG;GAExE,IAAI,OAAO,WAAW,MAAM,MAAM,IAAI,qBACpC,MAAM,IAAI,MACR,8BAA8B,MAAM,UAAU,KAAK,SAAS,oBAAoB,cAClF;GAEF,OAAO;EACT,CAAC,CACH,CACF,CAAC,CAAC,MAAM,MAAM,UAAU,KAAK,cAAc,KAAK,CAAC;CACnD;CACA,MAAM,eAAe,kBAAkB,eAAe,QAAQ,cAAc,cAAc,IAAI,KAAA;CAC9F,MAAM,gBAAgB,mBAAmB,eAAe,QAAQ,eAAe,eAAe,IAAI,KAAA;CAClG,IAAI,0BAAoC,CAAC;CACzC,IAAI,OAAO,OAAO,SAAS,yBAAyB,GAAG;EACrD,IAAI,CAAC,MAAM,QAAQ,QAAQ,uBAAuB,GAChD,MAAM,IAAI,MAAM,wEAAwE;EAE1F,IAAI,QAAQ,wBAAwB,SAAS,+BAC3C,MAAM,IAAI,MACR,wEAAwE,8BAA8B,QACxG;EAEF,0BAA0B,CACxB,GAAG,IAAI,IACL,QAAQ,wBAAwB,KAAK,YAAY;GAC/C,MAAM,OAAO,aAAa,SAAS,+BAA+B;GAClE,IACE,CAAC,yBAAyB,KAAK,IAAI,KACnC,OAAO,WAAW,MAAM,MAAM,IAAI,iCAElC,MAAM,IAAI,MAAM,6DAA6D,KAAK,GAAG;GAEvF,OAAO;EACT,CAAC,CACH,CACF,CAAC,CAAC,MAAM,MAAM,UAAU,KAAK,cAAc,KAAK,CAAC;CACnD;CACA,OAAO;EACL,SAAA;EACA,GAAI,eAAe,EAAE,aAAa,IAAI,CAAC;EACvC,GAAI,eAAe,SAAS,EAAE,cAAc,IAAI,CAAC;EACjD,GAAI,QAAQ,kBAAkB,OAAO,EAAE,eAAe,KAAK,IAAI,CAAC;EAChE;EACA,gBAAgB,QAAQ,mBAAmB;EAC3C,SAAS,CAAC;CACZ;AACF;AAEA,SAAgB,+BACd,OACA,QAAQ,sBAC2B;CACnC,IAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GAC5D,MAAM,IAAI,MAAM,WAAW,MAAM,sBAAsB;CAEzD,MAAM,SAAS;CACf,IAAI,OAAO,YAAA,GAAiD,MAAM,IAAI,MAAM,WAAW,MAAM,UAAU;CACvG,MAAM,aAAa,iBAAiB,MAAmC;CACvE,MAAM,UAAU,OAAO;CACvB,IAAI,CAAC,MAAM,QAAQ,OAAO,KAAK,QAAQ,MAAM,WAAW,OAAO,WAAW,QAAQ,GAChF,MAAM,IAAI,MAAM,WAAW,MAAM,wCAAwC;CAE3E,WAAW,UAAU,CAAC,GAAG,IAAI,IAAI,QAAQ,KAAK,WAAW,aAAa,QAAQ,GAAG,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK;CACzG,OAAO;AACT;AAEA,SAAgB,oCACd,GAAG,UAC4C;CAC/C,MAAM,SAAS,SAAS,QAAQ,YAA0D,YAAY,KAAA,CAAS;CAC/G,IAAI,OAAO,WAAW,GAAG,OAAO,KAAA;CAChC,MAAM,eAAe,OAClB,QAAQ,YAAY,QAAQ,iBAAiB,KAAA,CAAS,CAAC,CACvD,KAAK,YAAY,IAAI,IAAI,QAAQ,YAAY,CAAC;CACjD,IAAI;CACJ,IAAI,aAAa,SAAS,GACxB,eAAe,CAAC,GAAG,aAAa,EAAG,CAAC,CAAC,QAAQ,SAAS,aAAa,OAAO,SAAS,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK;CAE3G,MAAM,gBAAgB,CAAC,GAAG,IAAI,IAAI,OAAO,SAAS,YAAY,QAAQ,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CACzF,QAAQ,SAAS,CAAC,gBAAgB,aAAa,SAAS,IAAI,CAAC,CAAC,CAC9D,MAAM,MAAM,UAAU,KAAK,cAAc,KAAK,CAAC;CAClD,MAAM,cAAc,OAAO,KAAK,YAAY,IAAI,IAAI,QAAQ,uBAAuB,CAAC;CACpF,MAAM,0BAA0B,CAAC,GAAG,YAAY,EAAG,CAAC,CACjD,QAAQ,YAAY,YAAY,OAAO,aAAa,SAAS,IAAI,OAAO,CAAC,CAAC,CAAC,CAC3E,MAAM,MAAM,UAAU,KAAK,cAAc,KAAK,CAAC;CAClD,OAAO;EACL,SAAA;EACA,GAAI,eAAe,EAAE,aAAa,IAAI,CAAC;EACvC,GAAI,cAAc,SAAS,EAAE,cAAc,IAAI,CAAC;EAChD,GAAI,OAAO,OAAO,YAAY,QAAQ,kBAAkB,IAAI,IAAI,EAAE,eAAe,KAAK,IAAI,CAAC;EAC3F;EACA,gBAAgB,OAAO,MAAM,YAAY,QAAQ,cAAc;EAC/D,SAAS,CAAC,GAAG,IAAI,IAAI,OAAO,SAAS,YAAY,QAAQ,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK;CAC3E;AACF;AAEA,SAAgB,gCACd,SACoB;CACpB,IAAI,CAAC,SAAS,OAAO,KAAA;CACrB,OAAO,OAAO,KAAK,KAAK,UAAU,OAAO,GAAG,MAAM,CAAC,CAAC,SAAS,WAAW;AAC1E;AAEA,SAAgB,gCACd,OAC+C;CAC/C,IAAI,UAAU,KAAA,KAAa,UAAU,IAAI,OAAO,KAAA;CAChD,IAAI;CACJ,IAAI;EACF,SAAS,KAAK,MAAM,OAAO,KAAK,OAAO,WAAW,CAAC,CAAC,SAAS,MAAM,CAAC;CACtE,SAAS,OAAO;EACd,MAAM,IAAI,MAAM,yCAAyC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAAG;CACnH;CACA,IACE,CAAC,UACD,OAAO,WAAW,YAClB,MAAM,QAAQ,MAAM,KACnB,OAAiC,YAAA,GAElC,MAAM,IAAI,MAAM,+CAA+C;CAEjE,OAAO,+BAA+B,QAAQ,8BAA8B;AAC9E"}

package/dist/capabilityCeiling.cjs

@@ -0,0 +1,10 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_environment = require("./environment-CaCW3SgT.cjs");
+const require_capabilityCeiling = require("./capabilityCeiling-C-Y7H8oC.cjs");
+exports.SUBAGENT_CAPABILITY_CEILING_ENV = require_environment.SUBAGENT_CAPABILITY_CEILING_ENV;
+exports.SUBAGENT_CAPABILITY_CEILING_VERSION = require_capabilityCeiling.SUBAGENT_CAPABILITY_CEILING_VERSION;
+exports.SubagentCapabilityPolicyStore = require_capabilityCeiling.SubagentCapabilityPolicyStore;
+exports.decodeSubagentCapabilityCeiling = require_capabilityCeiling.decodeSubagentCapabilityCeiling;
+exports.encodeSubagentCapabilityCeiling = require_capabilityCeiling.encodeSubagentCapabilityCeiling;
+exports.intersectSubagentCapabilityCeilings = require_capabilityCeiling.intersectSubagentCapabilityCeilings;
+exports.parseSubagentCapabilityCeiling = require_capabilityCeiling.parseSubagentCapabilityCeiling;

package/dist/capabilityCeiling.d.mts

@@ -0,0 +1,46 @@
+import { r as SubagentPolicy } from "./subagentPolicy-ALJam4GN.mjs";
+import { y as SUBAGENT_CAPABILITY_CEILING_ENV } from "./environment-ma5oQ7uM.mjs";
+//#region src/schemas/team/capabilityCeiling.d.ts
+export declare const SUBAGENT_CAPABILITY_CEILING_VERSION: 2;
+export type SubagentCapabilityCeiling = {
+  allowedTools?: readonly string[];
+  requiredTools?: readonly string[];
+  allowMcpTools?: boolean;
+  allowedExternalProfiles?: readonly string[];
+  denyExtensions?: boolean;
+};
+export interface ResolvedSubagentCapabilityCeiling {
+  version: typeof SUBAGENT_CAPABILITY_CEILING_VERSION;
+  allowedTools?: string[];
+  requiredTools?: string[];
+  allowMcpTools?: boolean;
+  allowedExternalProfiles: string[];
+  denyExtensions: boolean;
+  sources: string[];
+}
+export interface SubagentCapabilityAudit {
+  ceiling: ResolvedSubagentCapabilityCeiling;
+  requestedTools?: string[];
+  effectiveTools: string[];
+  removedTools: string[];
+  internalTools: string[];
+  extensionsDenied: boolean;
+  removedExtensionCount: number;
+  requestedMcpToolCount: number;
+  effectiveMcpTools: string[];
+}
+export declare class SubagentCapabilityPolicyStore {
+  private readonly policies;
+  register(policy: SubagentPolicy, generation: string): void;
+  update(policy: SubagentPolicy, generation: string): void;
+  remove(owner: string, generation: string): void;
+  clear(): void;
+  resolve(inherited?: ResolvedSubagentCapabilityCeiling): ResolvedSubagentCapabilityCeiling | undefined;
+}
+export declare function parseSubagentCapabilityCeiling(value: unknown, field?: string): ResolvedSubagentCapabilityCeiling;
+export declare function intersectSubagentCapabilityCeilings(...ceilings: Array<ResolvedSubagentCapabilityCeiling | undefined>): ResolvedSubagentCapabilityCeiling | undefined;
+export declare function encodeSubagentCapabilityCeiling(ceiling: ResolvedSubagentCapabilityCeiling | undefined): string | undefined;
+export declare function decodeSubagentCapabilityCeiling(value: string | undefined): ResolvedSubagentCapabilityCeiling | undefined;
+//#endregion
+export { SUBAGENT_CAPABILITY_CEILING_ENV };
+//# sourceMappingURL=capabilityCeiling.d.mts.map

package/dist/capabilityCeiling.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilityCeiling.d.mts","names":[],"sources":["../src/schemas/team/capabilityCeiling.ts"],"mappings":";;;qBAaa;YA0BD;EACV;EACA;EACA;EACA;EACA;;iBAGe;EACf,gBAAgB;EAChB;EACA;EACA;EACA;EACA;EACA;;iBAGe;EACf,SAAS;EACT;EACA;EACA;EACA;EACA;EACA;EACA;EACA;;qBAQW;mBACM;EAEjB,SAAS,QAAQ,gBAAgB;EAYjC,OAAO,QAAQ,gBAAgB;EAK/B,OAAO,eAAe;EAItB;EAIA,QAAQ,YAAY,oCAAoC;;wBAmG1C,+BACd,gBACA,iBACC;wBAea,uCACX,UAAU,MAAM,iDAClB;wBA4Ba,gCACd,SAAS;wBAMK,gCACd,4BACC"}

package/dist/capabilityCeiling.mjs

@@ -0,0 +1,3 @@
+import { y as SUBAGENT_CAPABILITY_CEILING_ENV } from "./environment-DrqhrxG_.mjs";
+import { a as intersectSubagentCapabilityCeilings, i as encodeSubagentCapabilityCeiling, n as SubagentCapabilityPolicyStore, o as parseSubagentCapabilityCeiling, r as decodeSubagentCapabilityCeiling, t as SUBAGENT_CAPABILITY_CEILING_VERSION } from "./capabilityCeiling-CF7kAS18.mjs";
+export { SUBAGENT_CAPABILITY_CEILING_ENV, SUBAGENT_CAPABILITY_CEILING_VERSION, SubagentCapabilityPolicyStore, decodeSubagentCapabilityCeiling, encodeSubagentCapabilityCeiling, intersectSubagentCapabilityCeilings, parseSubagentCapabilityCeiling };

package/dist/delegation.cjs

@@ -0,0 +1,49 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+//#region src/schemas/team/delegation.ts
+/**
+* Subagent delegation - a cross-extension event protocol.
+*
+* Delegation lets another extension ask this runtime to run a subagent without
+* depending on its internals: the requester emits a request event and receives
+* started/update/response events back over the host event bus.
+*
+* Two generations coexist. V1 correlates purely by `requestId`. V2 adds
+* `ownerRunId` and `nodeId` so one owner can fan out to many nodes and have each
+* reply routed back, and it carries a typed `result` request.
+*
+* PROTOCOL COMPATIBILITY (do not change):
+* The event names and version numbers below are shared with po-subagents
+* and with doom-task and agiflow-pi-extension, which speak this protocol today.
+* The event names deliberately keep their `prompt-template:` prefix: that is the
+* established transport, and renaming it would silently stop delivery. Pinned by
+* contract tests.
+*
+* AVOID:
+* - Adding a required field to an existing version; add a version instead
+*/
+const SUBAGENT_DELEGATION_PROTOCOL_VERSION = 1;
+const SUBAGENT_DELEGATION_V2_PROTOCOL_VERSION = 2;
+const SUBAGENT_DELEGATION_REQUEST_EVENT = "prompt-template:subagent:request";
+const SUBAGENT_DELEGATION_STARTED_EVENT = "prompt-template:subagent:started";
+const SUBAGENT_DELEGATION_UPDATE_EVENT = "prompt-template:subagent:update";
+const SUBAGENT_DELEGATION_RESPONSE_EVENT = "prompt-template:subagent:response";
+const SUBAGENT_DELEGATION_CANCEL_EVENT = "prompt-template:subagent:cancel";
+//#endregion
+exports.SUBAGENT_DELEGATION_CANCEL_EVENT = SUBAGENT_DELEGATION_CANCEL_EVENT;
+exports.SUBAGENT_DELEGATION_PROTOCOL_VERSION = SUBAGENT_DELEGATION_PROTOCOL_VERSION;
+exports.SUBAGENT_DELEGATION_REQUEST_EVENT = SUBAGENT_DELEGATION_REQUEST_EVENT;
+exports.SUBAGENT_DELEGATION_RESPONSE_EVENT = SUBAGENT_DELEGATION_RESPONSE_EVENT;
+exports.SUBAGENT_DELEGATION_STARTED_EVENT = SUBAGENT_DELEGATION_STARTED_EVENT;
+exports.SUBAGENT_DELEGATION_UPDATE_EVENT = SUBAGENT_DELEGATION_UPDATE_EVENT;
+exports.SUBAGENT_DELEGATION_V2_PROTOCOL_VERSION = SUBAGENT_DELEGATION_V2_PROTOCOL_VERSION;
+var _agimon_ai_po_core_delegation = require("@agimon-ai/po-core/delegation");
+Object.keys(_agimon_ai_po_core_delegation).forEach(function(k) {
+	if (k !== "default" && !Object.prototype.hasOwnProperty.call(exports, k)) Object.defineProperty(exports, k, {
+		enumerable: true,
+		get: function() {
+			return _agimon_ai_po_core_delegation[k];
+		}
+	});
+});
+
+//# sourceMappingURL=delegation.cjs.map

package/dist/delegation.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegation.cjs","names":[],"sources":["../src/schemas/team/delegation.ts"],"sourcesContent":["/**\n * Subagent delegation - a cross-extension event protocol.\n *\n * Delegation lets another extension ask this runtime to run a subagent without\n * depending on its internals: the requester emits a request event and receives\n * started/update/response events back over the host event bus.\n *\n * Two generations coexist. V1 correlates purely by `requestId`. V2 adds\n * `ownerRunId` and `nodeId` so one owner can fan out to many nodes and have each\n * reply routed back, and it carries a typed `result` request.\n *\n * PROTOCOL COMPATIBILITY (do not change):\n * The event names and version numbers below are shared with po-subagents\n * and with doom-task and agiflow-pi-extension, which speak this protocol today.\n * The event names deliberately keep their `prompt-template:` prefix: that is the\n * established transport, and renaming it would silently stop delivery. Pinned by\n * contract tests.\n *\n * AVOID:\n * - Adding a required field to an existing version; add a version instead\n */\n\nexport const SUBAGENT_DELEGATION_PROTOCOL_VERSION = 1 as const;\nexport const SUBAGENT_DELEGATION_V2_PROTOCOL_VERSION = 2 as const;\n\n// This is the established extension-to-extension transport. The public API\n// intentionally reuses it instead of adding a second event protocol.\nexport const SUBAGENT_DELEGATION_REQUEST_EVENT = 'prompt-template:subagent:request';\nexport const SUBAGENT_DELEGATION_STARTED_EVENT = 'prompt-template:subagent:started';\nexport const SUBAGENT_DELEGATION_UPDATE_EVENT = 'prompt-template:subagent:update';\nexport const SUBAGENT_DELEGATION_RESPONSE_EVENT = 'prompt-template:subagent:response';\nexport const SUBAGENT_DELEGATION_CANCEL_EVENT = 'prompt-template:subagent:cancel';\n\nexport interface SubagentDelegationTurnBudget {\n  maxTurns: number;\n  graceTurns?: number;\n}\n\nexport interface SubagentDelegationToolBudget {\n  soft?: number;\n  hard: number;\n  block?: string[] | '*';\n}\n\nexport interface SubagentDelegationAgentContract {\n  version: 1;\n}\n\nexport type SubagentDelegationJsonSchemaObject = Record<string, unknown>;\n\nexport interface SubagentDelegationExecutionResult {\n  status: 'completed' | 'failed' | 'paused' | 'stopped' | 'detached';\n  success: boolean;\n  exitCode: number;\n  error?: string;\n  interrupted?: boolean;\n  timedOut?: boolean;\n  stopped?: boolean;\n  detached?: boolean;\n}\n\nexport interface SubagentDelegationReviewResult {\n  status: 'not-requested' | 'review-required' | 'reviewed' | 'blockers';\n  findings?: Array<{ severity: 'blocker' | 'non-blocking'; file?: string; issue: string; rationale: string }>;\n}\n\nexport interface SubagentDelegationEffectsResult {\n  fileMutation?: {\n    status: 'not-requested' | 'not-applicable' | 'observed' | 'missing';\n    expected: boolean;\n    attempted: boolean;\n    message?: string;\n  };\n}\n\nexport type SubagentDelegationAcceptanceEvidence =\n  | 'changed-files'\n  | 'tests-added'\n  | 'commands-run'\n  | 'validation-output'\n  | 'residual-risks'\n  | 'no-staged-files'\n  | 'diff-summary'\n  | 'review-findings'\n  | 'manual-notes';\n\nexport interface SubagentDelegationAcceptanceCriterion {\n  id: string;\n  must: string;\n  evidence?: SubagentDelegationAcceptanceEvidence[];\n  severity?: 'required' | 'recommended';\n}\n\nexport interface SubagentDelegationAcceptanceVerifyCommand {\n  id: string;\n  command: string;\n  timeoutMs?: number;\n  cwd?: string;\n  env?: Record<string, string>;\n  allowFailure?: boolean;\n}\n\nexport interface SubagentDelegationAcceptanceReview {\n  agent?: string;\n  focus?: string;\n  required?: boolean;\n}\n\ninterface SubagentDelegationAcceptanceFields {\n  criteria?: Array<string | SubagentDelegationAcceptanceCriterion>;\n  evidence?: SubagentDelegationAcceptanceEvidence[];\n  verify?: SubagentDelegationAcceptanceVerifyCommand[];\n  review?: SubagentDelegationAcceptanceReview | false;\n  stopRules?: string[];\n}\n\nexport type SubagentDelegationAcceptanceConfig = SubagentDelegationAcceptanceFields &\n  ({ level: 'none'; reason: string } | { level?: 'auto' | 'attested' | 'checked' | 'verified'; reason?: string });\n\nexport type SubagentDelegationAcceptance =\n  | 'auto'\n  | 'attested'\n  | 'checked'\n  | 'verified'\n  | false\n  | SubagentDelegationAcceptanceConfig;\n\nexport interface SubagentDelegationRequest {\n  version: typeof SUBAGENT_DELEGATION_PROTOCOL_VERSION;\n  requestId: string;\n  agent: string;\n  task: string;\n  context: 'fresh' | 'fork';\n  cwd: string;\n  model?: string;\n  timeoutMs?: number;\n  turnBudget?: SubagentDelegationTurnBudget;\n  toolBudget?: SubagentDelegationToolBudget;\n  skill?: string | string[] | boolean;\n  output?: string | boolean;\n  outputMode?: 'inline' | 'file-only';\n  outputSchema?: SubagentDelegationJsonSchemaObject;\n  agentContract?: SubagentDelegationAgentContract;\n  acceptance?: SubagentDelegationAcceptance;\n  artifacts?: boolean;\n  /** Foreground remains the compatibility default. */\n  runMode?: 'foreground' | 'detached';\n  /** Optional task identity shown to active root-session teammates. */\n  teamTask?: { id: string; subject: string };\n}\n\nexport interface SubagentDelegationStarted {\n  version: typeof SUBAGENT_DELEGATION_PROTOCOL_VERSION;\n  requestId: string;\n  runId?: string;\n}\n\nexport interface SubagentDelegationUpdate extends SubagentDelegationStarted {\n  runId?: string;\n  currentTool?: string;\n  currentToolArgs?: string;\n  recentOutput?: string;\n  recentOutputLines?: string[];\n  recentTools?: Array<{ tool: string; args: string }>;\n  model?: string;\n  toolCount?: number;\n  durationMs?: number;\n  tokens?: number;\n}\n\nexport type SubagentDelegationStatus =\n  | 'completed'\n  | 'failed'\n  | 'timed_out'\n  | 'cancelled'\n  | 'interrupted'\n  | 'turn_budget_exhausted'\n  | 'tool_budget_exhausted'\n  | 'structured_output_failed'\n  | 'acceptance_failed'\n  | 'invalid_request'\n  | 'unavailable_context';\n\nexport type SubagentDelegationAcceptanceStatus =\n  | 'pending'\n  | 'not-required'\n  | 'claimed'\n  | 'attested'\n  | 'checked'\n  | 'verified'\n  | 'review-required'\n  | 'reviewed'\n  | 'accepted'\n  | 'rejected';\n\nexport interface SubagentDelegationAcceptanceResult {\n  status: SubagentDelegationAcceptanceStatus;\n  evidenceStatus: Exclude<SubagentDelegationAcceptanceStatus, 'review-required' | 'reviewed' | 'accepted'>;\n  explicit: boolean;\n}\n\nexport interface SubagentDelegationResponse extends SubagentDelegationStarted {\n  status: SubagentDelegationStatus;\n  error?: string;\n  runId?: string;\n  childIndex?: number;\n  agent?: string;\n  model?: string;\n  exitCode?: number;\n  execution?: SubagentDelegationExecutionResult;\n  output?: string;\n  outputPath?: string;\n  sessionFile?: string;\n  acceptance?: SubagentDelegationAcceptanceResult;\n  review?: SubagentDelegationReviewResult;\n  effects?: SubagentDelegationEffectsResult;\n  turns?: number;\n  toolCount?: number;\n  durationMs?: number;\n  tokens?: number;\n  warnings?: string[];\n}\n\nexport interface SubagentDelegationCancel extends SubagentDelegationStarted {}\n\nexport type SubagentDelegationV2Thinking = 'off' | 'minimal' | 'low' | 'medium' | 'high' | 'xhigh' | 'max';\n\nexport type SubagentDelegationV2ResultRequest =\n  | { kind: 'text' }\n  | { kind: 'structured'; schema: SubagentDelegationJsonSchemaObject };\n\nexport interface SubagentDelegationV2Request {\n  version: typeof SUBAGENT_DELEGATION_V2_PROTOCOL_VERSION;\n  requestId: string;\n  ownerRunId: string;\n  nodeId: string;\n  agent: string;\n  task: string;\n  context: 'fresh' | 'fork';\n  cwd: string;\n  model?: string;\n  thinking?: SubagentDelegationV2Thinking;\n  timeoutMs?: number;\n  turnBudget?: SubagentDelegationTurnBudget;\n  toolBudget?: SubagentDelegationToolBudget;\n  skill?: string | string[] | boolean;\n  artifacts?: boolean;\n  result: SubagentDelegationV2ResultRequest;\n}\n\nexport interface SubagentDelegationV2Started {\n  version: typeof SUBAGENT_DELEGATION_V2_PROTOCOL_VERSION;\n  requestId: string;\n  ownerRunId: string;\n  nodeId: string;\n}\n\nexport interface SubagentDelegationV2Update extends SubagentDelegationV2Started {\n  runId?: string;\n  currentTool?: string;\n  currentToolArgs?: string;\n  recentOutput?: string;\n  recentOutputLines?: string[];\n  recentTools?: Array<{ tool: string; args: string }>;\n  model?: string;\n  toolCount?: number;\n  durationMs?: number;\n  tokens?: number;\n}\n\nexport type SubagentDelegationV2Status = SubagentDelegationStatus | 'duplicate_node';\n\nexport type SubagentDelegationV2Value = { kind: 'text'; text: string } | { kind: 'structured'; value: unknown };\n\nexport interface SubagentDelegationV2Usage {\n  input: number;\n  output: number;\n  cacheRead: number;\n  cacheWrite: number;\n  cost: number;\n  turns: number;\n  toolCalls: number;\n  durationMs: number;\n}\n\nexport interface SubagentDelegationV2TerminalResponse extends SubagentDelegationV2Started {\n  status: Exclude<SubagentDelegationV2Status, 'invalid_request'>;\n  error?: string;\n  runId?: string;\n  agent?: string;\n  model?: string;\n  thinking?: string;\n  exitCode?: number;\n  launchContractDigest?: string;\n  result?: SubagentDelegationV2Value;\n  usage?: SubagentDelegationV2Usage;\n}\n\n/** A malformed V2 request can only be correlated by the valid identity fields it supplied. */\nexport interface SubagentDelegationV2InvalidResponse {\n  version: typeof SUBAGENT_DELEGATION_V2_PROTOCOL_VERSION;\n  requestId: string;\n  ownerRunId?: string;\n  nodeId?: string;\n  status: 'invalid_request';\n  error?: string;\n}\n\nexport type SubagentDelegationV2Response = SubagentDelegationV2TerminalResponse | SubagentDelegationV2InvalidResponse;\n\nexport interface SubagentDelegationV2Cancel extends SubagentDelegationV2Started {}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAsBA,MAAa,uCAAuC;AACpD,MAAa,0CAA0C;AAIvD,MAAa,oCAAoC;AACjD,MAAa,oCAAoC;AACjD,MAAa,mCAAmC;AAChD,MAAa,qCAAqC;AAClD,MAAa,mCAAmC"}